From e2adc7f07f1a06693d57a3eb082701d10032da3b Mon Sep 17 00:00:00 2001
From: Abel Thomas <abeltom.kernel@gmail.com>
Date: Tue, 7 Jul 2026 10:30:01 +0200
Subject: [PATCH] library/ssl_tls13_keys: exit immediately upon failure.

exit immediately when `psa_get_key_attributes` called within
`ssl_tls13_key_schedule_stage_handshake` fails, avoids `ret`
being overwritten further down.

Fixes #10808

Signed-off-by: Abel Thomas <abeltom.kernel@gmail.com>
---
 library/ssl_tls13_keys.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/library/ssl_tls13_keys.c b/library/ssl_tls13_keys.c
index 865e02c2dc..b93e3ac134 100644
--- a/library/ssl_tls13_keys.c
+++ b/library/ssl_tls13_keys.c
@@ -1445,6 +1445,8 @@ static int ssl_tls13_key_schedule_stage_handshake(mbedtls_ssl_context *ssl)
                                             &key_attributes);
             if (status != PSA_SUCCESS) {
                 ret = PSA_TO_MBEDTLS_ERR(status);
+                MBEDTLS_SSL_DEBUG_RET(1, "psa_get_key_attributes", ret);
+                goto cleanup;
             }
 
             shared_secret_len = PSA_BITS_TO_BYTES(