Check there is enough room for extension.
(cherry picked from commit 7d89b3bf42e4b4067371ab33ef7631434e41d1e4)
This commit is contained in:
parent
bcc311668e
commit
ebda73f867
@ -617,6 +617,8 @@ unsigned char *ssl_add_clienthello_tlsext(SSL *s, unsigned char *p, unsigned cha
|
|||||||
|
|
||||||
#ifndef OPENSSL_NO_HEARTBEATS
|
#ifndef OPENSSL_NO_HEARTBEATS
|
||||||
/* Add Heartbeat extension */
|
/* Add Heartbeat extension */
|
||||||
|
if ((limit - ret - 4 - 1) < 0)
|
||||||
|
return NULL;
|
||||||
s2n(TLSEXT_TYPE_heartbeat,ret);
|
s2n(TLSEXT_TYPE_heartbeat,ret);
|
||||||
s2n(1,ret);
|
s2n(1,ret);
|
||||||
/* Set mode:
|
/* Set mode:
|
||||||
@ -844,6 +846,8 @@ unsigned char *ssl_add_serverhello_tlsext(SSL *s, unsigned char *p, unsigned cha
|
|||||||
/* Add Heartbeat extension if we've received one */
|
/* Add Heartbeat extension if we've received one */
|
||||||
if (s->tlsext_heartbeat & SSL_TLSEXT_HB_ENABLED)
|
if (s->tlsext_heartbeat & SSL_TLSEXT_HB_ENABLED)
|
||||||
{
|
{
|
||||||
|
if ((limit - ret - 4 - 1) < 0)
|
||||||
|
return NULL;
|
||||||
s2n(TLSEXT_TYPE_heartbeat,ret);
|
s2n(TLSEXT_TYPE_heartbeat,ret);
|
||||||
s2n(1,ret);
|
s2n(1,ret);
|
||||||
/* Set mode:
|
/* Set mode:
|
||||||
|
Loading…
x
Reference in New Issue
Block a user