TLS 1.3: address review of post-handshake defrag buffer relocation

- wolfSSL_ResourceFree(): reset pendingMsgSz/pendingMsgOffset/pendingMsgType
  alongside freeing ssl->pendingMsg.
- test_tls13_fragmented_session_ticket: ForceZero() preMasterSecret and the
  Arrays struct before freeing so WOLFSSL_CHECK_MEM_ZERO builds do not abort.

Author: julek-wolfssl

src/internal.c

@@ -8864,6 +8864,10 @@ void wolfSSL_ResourceFree(WOLFSSL* ssl)
      * used to reassemble post-handshake messages; release it here. */
     XFREE(ssl->pendingMsg, ssl->heap, DYNAMIC_TYPE_ARRAYS);
     ssl->pendingMsg = NULL;
+    /* Reset the rest of the defrag state for a possible object reuse. */
+    ssl->pendingMsgSz = 0;
+    ssl->pendingMsgOffset = 0;
+    ssl->pendingMsgType = 0;
     FreeKeyExchange(ssl);
 #ifdef WOLFSSL_ASYNC_IO
     /* Cleanup async */

tests/api/test_tls13.c

@@ -5689,7 +5689,14 @@ int test_tls13_fragmented_session_ticket(void)
      * configurations that already release the arrays (e.g. no HAVE_SESSION_TICKET)
      * they are NULL at this point and the free is skipped. */
     if (EXPECT_SUCCESS() && ssl_c->arrays != NULL) {
-        XFREE(ssl_c->arrays->preMasterSecret, ssl_c->heap, DYNAMIC_TYPE_SECRET);
+        /* Zero before freeing so WOLFSSL_CHECK_MEM_ZERO builds don't abort. */
+        if (ssl_c->arrays->preMasterSecret != NULL) {
+            ForceZero(ssl_c->arrays->preMasterSecret, ENCRYPT_LEN);
+            XFREE(ssl_c->arrays->preMasterSecret, ssl_c->heap,
+                  DYNAMIC_TYPE_SECRET);
+            ssl_c->arrays->preMasterSecret = NULL;
+        }
+        ForceZero(ssl_c->arrays, sizeof(Arrays));
         XFREE(ssl_c->arrays, ssl_c->heap, DYNAMIC_TYPE_ARRAYS);
         ssl_c->arrays = NULL;
     }