!28 修复CVE-2021-44732 CVE-2021-45450

Merge pull request !28 from 毛宇锋/master

!28 修复CVE-2021-44732 CVE-2021-45450
Merge pull request !28 from 毛宇锋/master
d6df2cd6 · openharmony_ci · Gitee · 29112480 · 69750b8b · d6df2cd6
隐藏空白更改
内联并排

Showing with 4 addition and 0 deletion

library/ssl_tls.c library/ssl_tls.c +4 -0

未找到文件。
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -301,6 +301,10 @@ static int ssl_session_copy( mbedtls_ssl_session *dst, const mbedtls_ssl_session
    mbedtls_ssl_session_free( dst );
    memcpy( dst, src, sizeof( mbedtls_ssl_session ) );

+#if defined(MBEDTLS_SSL_SESSION_TICKETS) && defined(MBEDTLS_SSL_CLI_C)
+    dst->ticket = NULL;
+#endif
+
 #if defined(MBEDTLS_X509_CRT_PARSE_C)
    if( src->peer_cert != NULL )
    {