commit a4174312da06da490df076845577a076783d28f5
author Gilles Peskine <Gilles.Peskine@arm.com> Mon Dec 13 14:38:40 2021 +0100
committer Gilles Peskine <Gilles.Peskine@arm.com> Mon Dec 13 14:38:40 2021 +0100
tree 8906d58610e6637e85a5c94b5a2f86b1d9477061
parent 36d33f37b65f4843e089850a15038652ca694fa9

Initialize hash_len before using it

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

library/ssl_tls.c

diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index 4a1191a..d868e49 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -2874,7 +2874,7 @@
 int mbedtls_ssl_parse_finished( mbedtls_ssl_context *ssl )
 {
     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;
-    unsigned int hash_len;
+    unsigned int hash_len = 12;
     unsigned char buf[SSL_MAX_HASH_LEN];
 
     MBEDTLS_SSL_DEBUG_MSG( 2, ( "=> parse finished" ) );
@@ -2896,8 +2896,6 @@
         goto exit;
     }
 
-    hash_len = 12;
-
     if( ssl->in_msg[0] != MBEDTLS_SSL_HS_FINISHED  )
     {
         mbedtls_ssl_send_alert_message( ssl, MBEDTLS_SSL_ALERT_LEVEL_FATAL,