Skip to content
  1. Nov 07, 2016
    • Matt Caswell's avatar
      Always ensure that init_msg is initialised for a CCS · c4377574
      Matt Caswell authored
      
      
      We read it later in grow_init_buf(). If CCS is the first thing received in
      a flight, then it will use the init_msg from the last flight we received. If
      the init_buf has been grown in the meantime then it will point to some
      arbitrary other memory location. This is likely to result in grow_init_buf()
      attempting to grow to some excessively large amount which is likely to
      fail. In practice this should never happen because the only time we receive
      a CCS as the first thing in a flight is in an abbreviated handshake. None
      of the preceding messages from the server flight would be large enough to
      trigger this.
      
      Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
      c4377574
  2. Nov 06, 2016
  3. Nov 05, 2016
  4. Nov 04, 2016