From e1efdf912f9f2d8a1ff9704454615de1dc1716fc Mon Sep 17 00:00:00 2001
From: Gilles Peskine <Gilles.Peskine@arm.com>
Date: Fri, 5 Jan 2018 21:18:37 +0100
Subject: [PATCH] ssl_write_server_key_exchange: don't hard-code max hash size

---
 library/ssl_srv.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/library/ssl_srv.c b/library/ssl_srv.c
index 2034d75f3e..bc94ebb982 100644
--- a/library/ssl_srv.c
+++ b/library/ssl_srv.c
@@ -3032,7 +3032,7 @@ curve_matching_done:
     {
         size_t signature_len = 0;
         unsigned int hashlen = 0;
-        unsigned char hash[64];
+        unsigned char hash[MBEDTLS_MD_MAX_SIZE];
 
         /*
          * 3.1: Choose hash algorithm: