[tinydtls-dev] There may be some null-dereference bugs in dtls.c

[Tuo Li <tuoli96@xxxxxxxxxxx>]

Hello!

   

In handle_handshake_msg(), the variable peer is checked in:

   if (peer) {

       dtls_stop_retransmission(ctx, peer);

   }

This indicates that peer can be NULL.

If so, some null-dereference bugs will occur in handle_handshake_msg().

peer is also checked in line 3436:

   if (peer && !peer->handshake_params)

and it is dereferenced in line 3451:

   peer->state = DTLS_STATE_CLIENTHELLO;

 

Thanks!

 

                                                                              Tuo Li