dtls1_heartbeat: check for NULL after allocating s->cert->ctypes

Signed-off-by: Kurt Roeckx <kurt@roeckx.be>
Reviewed-by: Richard Levitte <levitte@openssl.org>

diff --git a/ssl/d1_both.c b/ssl/d1_both.c
index 41ef5cb4f8af7e4f5282bf329cd93c208b5aef0f..877a2bfbc6fa69a7a3a7a82cc8b50604eb177487 100644 (file)
--- a/ssl/d1_both.c
+++ b/ssl/d1_both.c
@@ -1481,6 +1481,11 @@ dtls1_heartbeat(SSL *s)
         *  - Padding
         */
        buf = OPENSSL_malloc(1 + 2 + payload + padding);
         *  - Padding
         */
        buf = OPENSSL_malloc(1 + 2 + payload + padding);

+       if (buf == NULL)
+               {
+               SSLerr(SSL_F_DTLS1_HEARTBEAT, ERR_R_MALLOC_FAILURE);
+               return -1;
+               }

        p = buf;
        /* Message Type */
        *p++ = TLS1_HB_REQUEST;
        p = buf;
        /* Message Type */
        *p++ = TLS1_HB_REQUEST;