RootCauseunvalidated
the code retrieves previously resumed extension data without validating that the pointer is non-NULL before dereferencing it — in lib/ext/session_ticket.c in the session_ticket_send_params() function. Tension: if resumed_priv is NULL, the function assigns it to priv without validation.
ebc597f1-d6df-48dd-8a70-3b06f7eb92a5
the code retrieves previously resumed extension data without validating that the pointer is non-NULL before dereferencing it — in lib/ext/session_ticket.c in the session_ticket_send_params() function. Tension: if resumed_priv is NULL, the function assigns it to priv without validation.