From 32ccc9aa9f3dd1c0efa02d4b21376521a91e4705 Mon Sep 17 00:00:00 2001
From: bluhm <>
Date: Sun, 11 Nov 2018 06:27:57 +0000
Subject: Free the server tls transcript in case session reuse did not work.
 Regression found by Perl module p5-IO-Socket-SSL tests. with beck@ tb@

---
 src/lib/libssl/ssl_srvr.c | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

(limited to 'src/lib/libssl/ssl_srvr.c')

diff --git a/src/lib/libssl/ssl_srvr.c b/src/lib/libssl/ssl_srvr.c
index 03ae29a278..d9d78a7bef 100644
--- a/src/lib/libssl/ssl_srvr.c
+++ b/src/lib/libssl/ssl_srvr.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl_srvr.c,v 1.57 2018/11/11 02:22:34 beck Exp $ */
+/* $OpenBSD: ssl_srvr.c,v 1.58 2018/11/11 06:27:57 bluhm Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -676,9 +676,10 @@ ssl3_accept(SSL *s)
 			if (ret <= 0)
 				goto end;
 			S3I(s)->hs.state = SSL3_ST_SW_FLUSH;
-			if (s->internal->hit)
+			if (s->internal->hit) {
 				S3I(s)->hs.next_state = SSL3_ST_SR_FINISHED_A;
-			else
+				tls1_transcript_free(s);
+			} else
 				S3I(s)->hs.next_state = SSL_ST_OK;
 			s->internal->init_num = 0;
 			break;
-- 
cgit v1.2.3-55-g6feb