From 88fc0f8ee84226b57ab0897b6baf5f041316d06b Mon Sep 17 00:00:00 2001 From: jsing <> Date: Tue, 4 Feb 2020 18:00:30 +0000 Subject: Free the transcript as soon as we initialise the transcript hash. Unlike TLSv1.2 there is only a single hash in use, hence as soon as we know what the hash is and have initialised the transcript hash, we can free the transcript buffers. ok inoguchi@ tb@ --- src/lib/libssl/tls13_server.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'src/lib/libssl/tls13_server.c') diff --git a/src/lib/libssl/tls13_server.c b/src/lib/libssl/tls13_server.c index 1f17fe4ab0..660508a121 100644 --- a/src/lib/libssl/tls13_server.c +++ b/src/lib/libssl/tls13_server.c @@ -1,4 +1,4 @@ -/* $OpenBSD: tls13_server.c,v 1.22 2020/01/30 17:09:23 jsing Exp $ */ +/* $OpenBSD: tls13_server.c,v 1.23 2020/02/04 18:00:30 jsing Exp $ */ /* * Copyright (c) 2019, 2020 Joel Sing * Copyright (c) 2020 Bob Beck @@ -586,6 +586,7 @@ tls13_server_hello_sent(struct tls13_ctx *ctx) /* XXX - pass in hash. */ if (!tls1_transcript_hash_init(s)) goto err; + tls1_transcript_free(s); if (!tls1_transcript_hash_value(s, buf, sizeof(buf), &hash_len)) goto err; context.data = buf; -- cgit v1.2.3-55-g6feb