[openssl/openssl] 677102: ssl: add missing SSLfatal in TLSv1.3 finished MAC ...

"'Jakub Zelenka' via openssl-commits" <[email protected]>
Newsgroups gmane.comp.encryption.openssl.cvs
Message-ID <openssl/openssl/push/refs/heads/master/[email protected]>
  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 677102073341cdd75c9c4b6e6ed146025dba7a19
      https://github.com/openssl/openssl/commit/677102073341cdd75c9c4b6e6ed146025dba7a19
  Author: Jakub Zelenka <[email protected]>
  Date:   2026-08-11 (Tue, 11 Aug 2026)

  Changed paths:
    M ssl/tls13_enc.c

  Log Message:
  -----------
  ssl: add missing SSLfatal in TLSv1.3 finished MAC computation

tls13_final_finish_mac() returned failure on a NULL handshake digest
without calling SSLfatal() or raising any error, while its callers on
the Finished construction and processing paths assume the fatal state
was already set. This should currently not happen as the handshake
digest must have been fetched successfully earlier in the handshake,
so this is just future proofing of the error handling.

Assisted-by: Claude:claude-fable-5

Reviewed-by: Matt Caswell <[email protected]>
Reviewed-by: Frederik Wedel-Heinen <[email protected]>
MergeDate: Tue Aug 11 07:49:36 2026
(Merged from https://github.com/openssl/openssl/pull/32198)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/master/590e79-677102%40github.com.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.