Fix alert on tls1_process_alert failure.

If the function fails, it's an internal_error.

Change-Id: I4b7cf7a6ca2527f04b708303ab1bc71df762b55b
Reviewed-on: https://boringssl-review.googlesource.com/12312
Reviewed-by: David Benjamin <davidben@google.com>
This commit is contained in:
David Benjamin 2016-11-16 18:54:25 +09:00
parent 12d6bafed8
commit e7f60a2852

View File

@ -2007,9 +2007,14 @@ int ssl_ext_pre_shared_key_parse_clienthello(SSL *ssl,
/* TLS 1.3 session tickets are renewed separately as part of the
* NewSessionTicket. */
int renew;
return tls_process_ticket(ssl, out_session, &renew, CBS_data(&ticket),
CBS_len(&ticket), NULL, 0);
int unused_renew;
if (!tls_process_ticket(ssl, out_session, &unused_renew, CBS_data(&ticket),
CBS_len(&ticket), NULL, 0)) {
*out_alert = SSL_AD_INTERNAL_ERROR;
return 0;
}
return 1;
}
int ssl_ext_pre_shared_key_add_serverhello(SSL *ssl, CBB *out) {