dtls1_process_heartbeat: check for NULL after allocating buffer

Signed-off-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Richard Levitte <levitte@openssl.org>
2013-12-08 23:29:17 +01:00 · 2013-12-08 23:29:17 +01:00 · d15f5df70d
commit d15f5df70d
parent b1a08ac71f
1 changed files with 2 additions and 0 deletions
--- a/ssl/d1_both.c
+++ b/ssl/d1_both.c
@ -1392,6 +1392,8 @@ dtls1_process_heartbeat(SSL *s)
 		 * payload, plus padding
 		 */
 		buffer = OPENSSL_malloc(write_length);
+		if (buffer == NULL)
+			return -1;
 		bp = buffer;

 		/* Enter response type, length and copy payload */