From: Matt Caswell <matt@openssl.org>
Date: Thu, 18 Oct 2018 09:12:07 +0000 (+0100)
Subject: Fix a DTLS memory leak
X-Git-Tag: OpenSSL_1_1_1a~96
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=a6a83827a0e3a0f793783cef882bd790342d76aa;p=oweals%2Fopenssl.git

Fix a DTLS memory leak

Fixes #7428

Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/7431)

(cherry picked from commit 01666a8c1db3ecfb999e1a8f2c5436d114f95681)
---

diff --git a/ssl/statem/statem_srvr.c b/ssl/statem/statem_srvr.c
index ac5fd09134..7d0e9d0ba8 100644
--- a/ssl/statem/statem_srvr.c
+++ b/ssl/statem/statem_srvr.c
@@ -1519,8 +1519,10 @@ MSG_PROCESS_RETURN tls_process_client_hello(SSL *s, PACKET *pkt)
              * So check cookie length...
              */
             if (SSL_get_options(s) & SSL_OP_COOKIE_EXCHANGE) {
-                if (clienthello->dtls_cookie_len == 0)
+                if (clienthello->dtls_cookie_len == 0) {
+                    OPENSSL_free(clienthello);
                     return MSG_PROCESS_FINISHED_READING;
+                }
             }
         }