From 38185e2308d201d7dfd05aa0032636440bdd1bfa Mon Sep 17 00:00:00 2001 From: Ben Taylor Date: Mon, 1 Jun 2026 14:56:20 +0100 Subject: [PATCH] Improve robustness of tlen and lifetime variables Signed-off-by: Ben Taylor --- library/ssl_tls12_server.c | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/library/ssl_tls12_server.c b/library/ssl_tls12_server.c index a1fa442b7a..328e25aafc 100644 --- a/library/ssl_tls12_server.c +++ b/library/ssl_tls12_server.c @@ -3367,8 +3367,8 @@ MBEDTLS_CHECK_RETURN_CRITICAL static int ssl_write_new_session_ticket(mbedtls_ssl_context *ssl) { int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED; - size_t tlen; - uint32_t lifetime; + size_t tlen = 0; + uint32_t lifetime = 0; MBEDTLS_SSL_DEBUG_MSG(2, ("=> write new session ticket")); @@ -3395,8 +3395,6 @@ static int ssl_write_new_session_ticket(mbedtls_ssl_context *ssl) ssl->out_msg + MBEDTLS_SSL_OUT_CONTENT_LEN, &tlen, &lifetime)) != 0) { MBEDTLS_SSL_DEBUG_RET(1, "mbedtls_ssl_ticket_write", ret); - tlen = 0; - lifetime = 0; } MBEDTLS_PUT_UINT32_BE(lifetime, ssl->out_msg, 4);