]> git.ipfire.org Git - thirdparty/openssl.git/commit
Assert SSLFatal on keylog failure
authorNeil Horman <nhorman@openssl.org>
Sun, 10 Aug 2025 21:53:28 +0000 (17:53 -0400)
committerNeil Horman <nhorman@openssl.org>
Tue, 12 Aug 2025 18:15:50 +0000 (14:15 -0400)
commit7d78cd722b63e53a668c7ec13b9eeb6e13e32f13
treed56f80870ed4c1e35f567d3682578c7b15561425
parent0a15d71f6719c5195af9dbd258a52e0b73ed0acd
Assert SSLFatal on keylog failure

We hit an check_failure assert during memfail testing in
ssl_read_state_machine, based on a return of WORK_ERROR without an
SSLFatal call being made.  This occurs because, if we fail in
ssl_log_secret (which we do due to memfail testing, we don't actually
assert an SSL fatal error.

Fix it by adding the SSLFatal call

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Saša Nedvědický <sashan@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28216)
ssl/tls13_enc.c