From: Jakub Zelenka <jakub.zelenka@openssl.foundation>
Date: Fri, 24 Jul 2026 12:42:25 +0000 (+0200)
Subject: ech: check memory failure in vpm allocation in store final check
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=544e28ee06ac247e8fa02b46e306145d1c52cf17;p=thirdparty%2Fopenssl.git

ech: check memory failure in vpm allocation in store final check

This fixes issue found by fuzz test in updated corpora for
echconfiglist_parser.

Reviewed-by: Norbert Pocs <norbertp@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.foundation>
MergeDate: Mon Jul 27 16:36:15 2026
(Merged from https://github.com/openssl/openssl/pull/32070)
---

diff --git a/ssl/ech/ech_store.c b/ssl/ech/ech_store.c
index dd05bf3702c..2bd4915f1f4 100644
--- a/ssl/ech/ech_store.c
+++ b/ssl/ech/ech_store.c
@@ -254,6 +254,10 @@ static int ech_final_config_checks(OSSL_ECHSTORE_ENTRY *ee)
     char *lastlabel = NULL;
     size_t lllen;
 
+    if (vpm == NULL) {
+        ERR_raise(ERR_LIB_SSL, ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
     /* check local support for some suite */
     for (ind = 0; ind != (int)ee->nsuites; ind++) {
         /*