Commit 184718ba authored by Alessandro Ghedini's avatar Alessandro Ghedini Committed by Matt Caswell
Browse files

Validate ClientHello extension field length 



RT#4069

Reviewed-by: default avatarEmilia Käsper <emilia@openssl.org>
Reviewed-by: default avatarMatt Caswell <matt@openssl.org>
parent 6b247c18

ssl/t1_lib.c

+1 −1
Original line number Diff line number Diff line
@@ -2024,7 +2024,7 @@ static int ssl_scan_clienthello_tlsext(SSL *s, unsigned char **p, 


    n2s(data, len);



    if (data > (d + n - len))

    if (data + len != d + n)

        goto err;



    while (data <= (d + n - 4)) {