commit e9f00445bc3e02fa4713cf6215eb7cf9e793995d
author Przemek Stekiel <przemyslaw.stekiel@mobica.com> Mon Mar 14 09:42:32 2022 +0100
committer Przemek Stekiel <przemyslaw.stekiel@mobica.com> Mon Mar 14 09:42:32 2022 +0100
tree 0de19a45996df06d1d78c52325fc8f084cbdc646
parent 130c4b556727fae09978bdc5971a420f7740e118

Destroy ecdh_psa_privkey on failure

Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>

library/ssl_srv.c

diff --git a/library/ssl_srv.c b/library/ssl_srv.c
index 23fc49d..a873753 100644
--- a/library/ssl_srv.c
+++ b/library/ssl_srv.c
@@ -3181,6 +3181,8 @@
         {
             ret = psa_ssl_status_to_mbedtls( status );
             MBEDTLS_SSL_DEBUG_RET( 1, "psa_export_public_key", ret );
+            (void) psa_destroy_key( handshake->ecdh_psa_privkey );
+            handshake->ecdh_psa_privkey = MBEDTLS_SVC_KEY_ID_INIT;
             return( ret );
         }
 
@@ -3919,6 +3921,8 @@
             {
                 ret = psa_ssl_status_to_mbedtls( status );
                 MBEDTLS_SSL_DEBUG_RET( 1, "psa_raw_key_agreement", ret );
+                (void) psa_destroy_key( handshake->ecdh_psa_privkey );
+                handshake->ecdh_psa_privkey = MBEDTLS_SVC_KEY_ID_INIT;
                 return( ret );
             }