ech: check memory failure in vpm allocation in store final check

This fixes issue found by fuzz test in updated corpora for
echconfiglist_parser.

Reviewed-by: Norbert Pocs <norbertp@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.foundation>
MergeDate: Mon Jul 27 16:36:15 2026
(Merged from https://github.com/openssl/openssl/pull/32070)

diff --git a/ssl/ech/ech_store.c b/ssl/ech/ech_store.c
index dd05bf3702c66c718a325a4b9f5f7ae64c5f7414..2bd4915f1f4a1b59f5c300f95e14df222f06d035 100644 (file)
--- a/ssl/ech/ech_store.c
+++ b/ssl/ech/ech_store.c
@@ -254,6 +254,10 @@ static int ech_final_config_checks(OSSL_ECHSTORE_ENTRY *ee)
     char *lastlabel = NULL;
     size_t lllen;
 
+    if (vpm == NULL) {
+        ERR_raise(ERR_LIB_SSL, ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
     /* check local support for some suite */
     for (ind = 0; ind != (int)ee->nsuites; ind++) {
         /*