Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-09-22 13:01:16 +03:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'bugfix/memory-safety-and-validation_v6.0' into 'release/v6.0'

Browse Source 
fix(security): findings from project Vanessa (v6.0)

See merge request espressif/esp-idf!50391
This commit is contained in:
Jiang Jiang Jian
2026-07-22 10:28:14 +08:00
parent 5edd750418 d85cb8d7cc
commit bd994cb0f3
15 changed files with 207 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
components/esp_https_server/src/https_server.c
View File

@@ -198,6 +198,10 @@ static esp_err_t httpd_ssl_open(httpd_handle_t server, int sockfd)
esp_https_server_last_error_t last_error = {0};
last_error.last_error = ESP_ERR_NO_MEM;
http_dispatch_event_to_event_loop(HTTPS_SERVER_EVENT_ERROR, &last_error, sizeof(last_error));
/* The TLS session (and its underlying socket fd) is already established; free it
* before returning so a failed connection under memory pressure does not leak the
* SSL context and the socket (CWE-401 / CWE-772). */
esp_tls_server_session_delete(tls);
return ESP_ERR_NO_MEM;
}
transport_ctx->tls = tls;