Leonid Rozenboim

## Description fix potential NULL-dereferencing if local certificate was not set. See #6183 ## Status READY ## Requires Backporting NO ## Migrations NO

Looking at the bigger picture it is clear that if `ssl->session` is NULL, there will be a failure much earlier, and that is well protected from, however, the practice of...

mbedtls_ssl_check_curve prevent potential NULL pointer dereferencing

1

Avoid the shorthand practice of the form 'x = func(foo)->bar' which exposes the code to NULL pointer derefferncing when the 'func()' returns a NULL pointer. In this specific case this...

Potential cases of NULL pointer dereferencing

1

### Summary This is an umbrella ticket for several cases of problematic code where there exists a potential for NULL-pointer dereferencing. ### System information ### Expected behavior ### Actual behavior...

Fix hash buffer size with macro derived from configuration

8

There are two pre-existing macros that define has buffer size requirement: PSA_HASH_MAX_SIZE and MBEDTLS_MD_MAX_SIZE for PSA and legacy cyphers respectfully. Using one of these macros (per configuration) instead of a...

Hardcoded, insufficient hash buffer size

2

### Summary In several code locations, a has result buffer is declared with a hard-coded size of 48. This does not account for the fact that SHA512 and SHA384 are...