generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Validate ClientHello extension field length

Browse Source 
RT#4069

Reviewed-by: Emilia Käsper <emilia@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
This commit is contained in:
Alessandro Ghedini 2015-10-02 13:43:29 +02:00 committed by Matt Caswell
parent 67202973cf
commit 52a48f9eed
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
ssl/t1_lib.c
View File

@ -1927,6 +1927,9 @@ static int ssl_scan_clienthello_tlsext(SSL *s, PACKET *pkt, int *al)
if (!PACKET_get_net_2(pkt, &len)) if (!PACKET_get_net_2(pkt, &len))
goto err; goto err;
if (PACKET_remaining(pkt) != len)
goto err;
while (PACKET_get_net_2(pkt, &type) && PACKET_get_net_2(pkt, &size)) { while (PACKET_get_net_2(pkt, &type) && PACKET_get_net_2(pkt, &size)) {
PACKET subpkt; PACKET subpkt;