generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>

Browse Source 
Reviewed by: steve

Send fatal alert if heartbeat extension has an illegal value.
This commit is contained in:
Dr. Stephen Henson 2012-01-05 00:23:31 +00:00
parent 52bef4d677
commit 166dea6ac8
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
ssl/t1_lib.c
View File

@ -825,6 +825,7 @@ unsigned char *ssl_add_serverhello_tlsext(SSL *s, unsigned char *p, unsigned cha
*(ret++) = SSL_TLSEXT_HB_DONT_SEND_REQUESTS; *(ret++) = SSL_TLSEXT_HB_DONT_SEND_REQUESTS;
else else
*(ret++) = SSL_TLSEXT_HB_ENABLED; *(ret++) = SSL_TLSEXT_HB_ENABLED;
} }
#endif #endif
@ -1282,6 +1283,8 @@ int ssl_parse_clienthello_tlsext(SSL *s, unsigned char **p, unsigned char *d, in
s->tlsext_heartbeat |= SSL_TLSEXT_HB_ENABLED; s->tlsext_heartbeat |= SSL_TLSEXT_HB_ENABLED;
s->tlsext_heartbeat |= SSL_TLSEXT_HB_DONT_SEND_REQUESTS; s->tlsext_heartbeat |= SSL_TLSEXT_HB_DONT_SEND_REQUESTS;
break; break;
default: *al = SSL_AD_ILLEGAL_PARAMETER;
return 0;
} }
} }
#endif #endif
@ -1553,6 +1556,8 @@ int ssl_parse_serverhello_tlsext(SSL *s, unsigned char **p, unsigned char *d, in
s->tlsext_heartbeat |= SSL_TLSEXT_HB_ENABLED; s->tlsext_heartbeat |= SSL_TLSEXT_HB_ENABLED;
s->tlsext_heartbeat |= SSL_TLSEXT_HB_DONT_SEND_REQUESTS; s->tlsext_heartbeat |= SSL_TLSEXT_HB_DONT_SEND_REQUESTS;
break; break;
default: *al = SSL_AD_ILLEGAL_PARAMETER;
return 0;
} }
} }
#endif #endif