From: Stefan Eissing <stefan@eissing.org>
Date: Thu, 25 Sep 2025 10:07:25 +0000 (+0200)
Subject: ngtcp2: fix early return
X-Git-Tag: rc-8_17_0-2~355
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=5f4f70e06d688e34a6079a81db1794d76c465fdb;p=thirdparty%2Fcurl.git

ngtcp2: fix early return

On a failed tls handshake, the receive function returned without
restoring the current data.

Reported in Joshua's sarif data

Closes #18723
---

diff --git a/lib/vquic/curl_ngtcp2.c b/lib/vquic/curl_ngtcp2.c
index 0e05694992..4998400d96 100644
--- a/lib/vquic/curl_ngtcp2.c
+++ b/lib/vquic/curl_ngtcp2.c
@@ -1303,8 +1303,10 @@ static CURLcode cf_ngtcp2_recv(struct Curl_cfilter *cf, struct Curl_easy *data,
   *pnread = 0;
 
   /* handshake verification failed in callback, do not recv anything */
-  if(ctx->tls_vrfy_result)
-    return ctx->tls_vrfy_result;
+  if(ctx->tls_vrfy_result) {
+    result = ctx->tls_vrfy_result;
+    goto out;
+  }
 
   pktx_init(&pktx, cf, data);