Commit 1a14b47e authored by Dr. Stephen Henson's avatar Dr. Stephen Henson Committed by Matt Caswell
Browse files

Prevent use of binary curves when OPENSSL_NO_EC2M is defined 



Reviewed-by: default avatarMatt Caswell <matt@openssl.org>
parent d253c9cd

ssl/t1_lib.c

+4 −0
Original line number Diff line number Diff line
@@ -435,6 +435,10 @@ static int tls_curve_allowed(SSL *s, const unsigned char *curve, int op) 
				sizeof(nid_list)/sizeof(nid_list[0])))

		return 0;

	cinfo = &nid_list[curve[1]-1];

#ifdef OPENSSL_NO_EC2M

	if (cinfo->flags & TLS_CURVE_CHAR2)

		return 0;

#endif

	return ssl_security(s, op, cinfo->secbits, cinfo->nid, (void *)curve);

	}