copilot fix for ECH SNI logic

sebastian-carpenter · sebastian-carpenter · commit b208f36d9c53 · 2026-02-26T11:39:04.000-07:00
diff --git a/src/tls.c b/src/tls.c
@@ -2362,7 +2362,8 @@ static int TLSX_SNI_Parse(WOLFSSL* ssl, const byte* input, word16 length,
 #endif
 
 #if defined(HAVE_ECH)
-    if (ech != NULL && ech->sniState == ECH_INNER_SNI_ATTEMPT) {
+    if (ech != NULL && ech->sniState == ECH_INNER_SNI_ATTEMPT &&
+            ech->privateName != NULL) {
         matched = cacheOnly || (XSTRLEN(ech->privateName) == size &&
             XSTRNCMP(ech->privateName, (const char*)input + offset, size) == 0);
     }

Original file line number	Diff line number	Diff line change
`@@ -2362,7 +2362,8 @@ static int TLSX_SNI_Parse(WOLFSSL* ssl, const byte* input, word16 length,`
`2362`	`2362`	`#endif`
`2363`	`2363`
`2364`	`2364`	`#if defined(HAVE_ECH)`
`2365`		`- if (ech != NULL && ech->sniState == ECH_INNER_SNI_ATTEMPT) {`
	`2365`	`+ if (ech != NULL && ech->sniState == ECH_INNER_SNI_ATTEMPT &&`
	`2366`	`+ ech->privateName != NULL) {`
`2366`	`2367`	`matched = cacheOnly \|\| (XSTRLEN(ech->privateName) == size &&`
`2367`	`2368`	`XSTRNCMP(ech->privateName, (const char*)input + offset, size) == 0);`
`2368`	`2369`	`}`