Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-07-13 14:33:06 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix(esp_https_server): free TLS session on transport_ctx OOM in httpd_ssl_open

Browse Source
This commit is contained in:
Ashish Sharma
2026-06-26 18:44:49 +08:00
parent 440dd3b52a
commit d64409fdb2
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
components/esp_https_server/src/https_server.c
View File

@@ -198,6 +198,10 @@ static esp_err_t httpd_ssl_open(httpd_handle_t server, int sockfd)
esp_https_server_last_error_t last_error = {0};
last_error.last_error = ESP_ERR_NO_MEM;
http_dispatch_event_to_event_loop(HTTPS_SERVER_EVENT_ERROR, &last_error, sizeof(last_error));
/* The TLS session (and its underlying socket fd) is already established; free it
* before returning so a failed connection under memory pressure does not leak the
* SSL context and the socket (CWE-401 / CWE-772). */
esp_tls_server_session_delete(tls);
return ESP_ERR_NO_MEM;
}
transport_ctx->tls = tls;