From: Dr. Stephen Henson <steve@openssl.org>
Date: Tue, 16 Nov 2010 22:41:07 +0000 (+0000)
Subject: Don't assume a decode error if session tlsext_ecpointformatlist is not NULL:
X-Git-Tag: OpenSSL_1_0_0c~35
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=4385b556b4b59b4ea0d8bdf9597f079008cfb46a;p=oweals%2Fopenssl.git

Don't assume a decode error if session tlsext_ecpointformatlist is not NULL:
it can be legitimately set elsewhere.
---

diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c
index eea59163aa..f28142b34e 100644
--- a/ssl/t1_lib.c
+++ b/ssl/t1_lib.c
@@ -779,8 +779,8 @@ int ssl_parse_clienthello_tlsext(SSL *s, unsigned char **p, unsigned char *d, in
 				{
 				if(s->session->tlsext_ecpointformatlist)
 					{
-					*al = TLS1_AD_DECODE_ERROR;
-					return 0;
+					OPENSSL_free(s->session->tlsext_ecpointformatlist);
+					s->session->tlsext_ecpointformatlist = NULL;
 					}
 				s->session->tlsext_ecpointformatlist_length = 0;
 				if ((s->session->tlsext_ecpointformatlist = OPENSSL_malloc(ecpointformatlist_length)) == NULL)