CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/06/14 09:51:17
Modified files:
lib/libssl : tls13_client.c
Log message:
Correct secondary key share handling for HelloRetryRequests.
With the introduction of a secondary key share, we fail to ensure that the
HelloRetryRequest does not specify the group that was used for the
secondary key share. We also fail to free the secondary key share early in
this case, meaning that it lingers in memory until the SSL is reset or
freed. Fix both of these issues.
ok tb@
