lib/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-07-29 11:41:15 +03:00
Code Activity

Add hrr no change check and allign mbedtls_ssl_session_reset_msg_layer

Browse Source 
Signed-off-by: XiaokangQian <xiaokang.qian@arm.com>
This commit is contained in:
XiaokangQian
2022-01-21 02:53:13 +00:00
parent 355e09ae9d
commit 2b01dc30cb
2 changed files with 44 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

29
library/ssl_tls.c
View File

@ -3403,6 +3403,7 @@ error:
void mbedtls_ssl_session_reset_msg_layer( mbedtls_ssl_context *ssl, void mbedtls_ssl_session_reset_msg_layer( mbedtls_ssl_context *ssl,
int partial ) int partial )
{ {
#if defined(MBEDTLS_SSL_LEGACY_MSG_LAYER_REQUIRED)
#if defined(MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH) #if defined(MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH)
size_t in_buf_len = ssl->in_buf_len; size_t in_buf_len = ssl->in_buf_len;
size_t out_buf_len = ssl->out_buf_len; size_t out_buf_len = ssl->out_buf_len;
@ -3453,12 +3454,40 @@ void mbedtls_ssl_session_reset_msg_layer( mbedtls_ssl_context *ssl,
mbedtls_ssl_dtls_replay_reset( ssl ); mbedtls_ssl_dtls_replay_reset( ssl );
#endif #endif
#if defined(MBEDTLS_SSL_PROTO_TLS1_2)
if( ssl->transform ) if( ssl->transform )
{ {
mbedtls_ssl_transform_free( ssl->transform ); mbedtls_ssl_transform_free( ssl->transform );
mbedtls_free( ssl->transform ); mbedtls_free( ssl->transform );
ssl->transform = NULL; ssl->transform = NULL;
} }
#endif /* MBEDTLS_SSL_PROTO_TLS1_2 */
#else
((void) partial);
#endif /* MBEDTLS_SSL_LEGACY_MSG_LAYER_REQUIRED */
#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
mbedtls_ssl_transform_free( ssl->transform_application );
mbedtls_free( ssl->transform_application );
ssl->transform_application = NULL;
if( ssl->handshake != NULL )
{
mbedtls_ssl_transform_free( ssl->handshake->transform_earlydata );
mbedtls_free( ssl->handshake->transform_earlydata );
ssl->handshake->transform_earlydata = NULL;
mbedtls_ssl_transform_free( ssl->handshake->transform_handshake );
mbedtls_free( ssl->handshake->transform_handshake );
ssl->handshake->transform_handshake = NULL;
}
#if defined(MBEDTLS_ZERO_RTT) && defined(MBEDTLS_SSL_CLI_C)
ssl->early_data_buf = NULL;
ssl->early_data_len = 0;
#endif /* MBEDTLS_ZERO_RTT && MBEDTLS_SSL_CLI_C */
#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
} }
int mbedtls_ssl_session_reset_int( mbedtls_ssl_context *ssl, int partial ) int mbedtls_ssl_session_reset_int( mbedtls_ssl_context *ssl, int partial )

15
library/ssl_tls13_client.c
View File

@ -905,6 +905,21 @@ static int ssl_tls13_server_hello_coordinate( mbedtls_ssl_context *ssl,
MBEDTLS_ERR_SSL_UNEXPECTED_MESSAGE ); MBEDTLS_ERR_SSL_UNEXPECTED_MESSAGE );
return( MBEDTLS_ERR_SSL_UNEXPECTED_MESSAGE ); return( MBEDTLS_ERR_SSL_UNEXPECTED_MESSAGE );
} }
/*
* Clients must abort the handshake with an "illegal_parameter"
* alert if the HelloRetryRequest would not result in any change
* in the ClientHello.
* In a PSK only key exchange that what we expect.
*/
if( ! mbedtls_ssl_conf_tls13_some_ephemeral_enabled( ssl ) )
{
MBEDTLS_SSL_DEBUG_MSG( 1,
( "Unexpected HRR in pure PSK key exchange." ) );
MBEDTLS_SSL_PEND_FATAL_ALERT(
MBEDTLS_SSL_ALERT_MSG_ILLEGAL_PARAMETER,
MBEDTLS_ERR_SSL_ILLEGAL_PARAMETER);
return( MBEDTLS_ERR_SSL_ILLEGAL_PARAMETER );
}
ssl->handshake->hello_retry_request_count++; ssl->handshake->hello_retry_request_count++;