NULL-check s2n_cert_chain_and_key_get_pkey_type

This adds POSIX_ENSURE_REF to guard the case where a certificate chain is empty.
aws · Sep 21, 2021 · f508678 · f508678
1 parent 4de98dc
commit f508678
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/crypto/s2n_certificate.c b/crypto/s2n_certificate.c
@@ -619,6 +619,9 @@ void *s2n_cert_chain_and_key_get_ctx(struct s2n_cert_chain_and_key *cert_and_key
 
 s2n_pkey_type s2n_cert_chain_and_key_get_pkey_type(struct s2n_cert_chain_and_key *chain_and_key)
 {
+    PTR_ENSURE_REF(chain_and_key);
+    PTR_ENSURE_REF(chain_and_key->cert_chain);
+    PTR_ENSURE_REF(chain_and_key->cert_chain->head);
     return chain_and_key->cert_chain->head->pkey_type;
 }