mirror of
https://github.com/wolfSSL/wolfssl.git
synced 2026-10-24 04:09:07 +03:00
TLSX_TCA_New() allocated the object, then the identifier, and freed the object again on every path where the identifier was missing or the wrong size. Check the type and size first and put the identifier in a flexible array at the end of the object, so the failure paths are early returns and there is one buffer to free. TLSX_TCA_New() never makes a SHA-1 or X509 name entry without an identifier, so TLSX_TCA_Write() drops its fallbacks for a missing one.
Before creating any new configure files (.conf) read the CONF_FILES_README.md