dtls1_process_heartbeat: check for NULL after allocating buffer

Signed-off-by: Kurt Roeckx <kurt@roeckx.be>
Reviewed-by: Richard Levitte <levitte@openssl.org>

diff --git a/ssl/d1_both.c b/ssl/d1_both.c
index 82e814ae6fa259195248c3bcc96f54669cbd188b..41ef5cb4f8af7e4f5282bf329cd93c208b5aef0f 100644 (file)
--- a/ssl/d1_both.c
+++ b/ssl/d1_both.c
@@ -1392,6 +1392,8 @@ dtls1_process_heartbeat(SSL *s)
                 * payload, plus padding
                 */
                buffer = OPENSSL_malloc(write_length);
+               if (buffer == NULL)
+                       return -1;
                bp = buffer;
 
                /* Enter response type, length and copy payload */