src/ssl_sess.c: in wolfSSL_CTX_flush_sessions(), add missing check of…

… s->sessionIDSz, similar to the fix to TlsSessionCacheGetAndLock() in wolfSSL#8182 (ef67b1c). also, add missing macro to .wolfssl_known_macro_extras.
gojimmypi · Dec 3, 2024 · 547cdea · 547cdea
1 parent 42afede
commit 547cdea
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/.wolfssl_known_macro_extras b/.wolfssl_known_macro_extras
@@ -463,6 +463,7 @@ STM32L475xx
 STM32L4A6xx
 STM32L552xx
 STM32L562xx
+STM32MP135Fxx
 STM32U575xx
 STM32U585xx
 STM32U5A9xx

diff --git a/src/ssl_sess.c b/src/ssl_sess.c
@@ -843,6 +843,7 @@ void wolfSSL_CTX_flush_sessions(WOLFSSL_CTX* ctx, long tm)
 #ifdef SESSION_CACHE_DYNAMIC_MEM
                 s != NULL &&
 #endif
+                s->sessionIDSz == ID_LEN &&
                 XMEMCMP(s->sessionID, id, ID_LEN) != 0 &&
                 s->bornOn + s->timeout < (word32)tm
                 )