Commit 544e28ee06 for openssl.org
commit 544e28ee06ac247e8fa02b46e306145d1c52cf17
Author: Jakub Zelenka <jakub.zelenka@openssl.foundation>
Date: Fri Jul 24 14:42:25 2026 +0200
ech: check memory failure in vpm allocation in store final check
This fixes issue found by fuzz test in updated corpora for
echconfiglist_parser.
Reviewed-by: Norbert Pocs <norbertp@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.foundation>
MergeDate: Mon Jul 27 16:36:15 2026
(Merged from https://github.com/openssl/openssl/pull/32070)
diff --git a/ssl/ech/ech_store.c b/ssl/ech/ech_store.c
index dd05bf3702..2bd4915f1f 100644
--- a/ssl/ech/ech_store.c
+++ b/ssl/ech/ech_store.c
@@ -254,6 +254,10 @@ static int ech_final_config_checks(OSSL_ECHSTORE_ENTRY *ee)
char *lastlabel = NULL;
size_t lllen;
+ if (vpm == NULL) {
+ ERR_raise(ERR_LIB_SSL, ERR_R_INTERNAL_ERROR);
+ goto err;
+ }
/* check local support for some suite */
for (ind = 0; ind != (int)ee->nsuites; ind++) {
/*