Commit 31a7d80d authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Send alert for bad DH CKE 



RT#4511

Reviewed-by: default avatarMatt Caswell <matt@openssl.org>
parent 0ed26acc

ssl/statem/statem_srvr.c

+1 −6
Original line number Diff line number Diff line
@@ -2269,17 +2269,12 @@ static int tls_process_cke_dhe(SSL *s, PACKET *pkt, int *al) 
    EVP_PKEY *ckey = NULL;

    int ret = 0;



    if (!PACKET_get_net_2(pkt, &i)) {

    if (!PACKET_get_net_2(pkt, &i) || PACKET_remaining(pkt) != i) {

        *al = SSL_AD_HANDSHAKE_FAILURE;

        SSLerr(SSL_F_TLS_PROCESS_CKE_DHE,

               SSL_R_DH_PUBLIC_VALUE_LENGTH_IS_WRONG);

        goto err;

    }

    if (PACKET_remaining(pkt) != i) {

        SSLerr(SSL_F_TLS_PROCESS_CKE_DHE,

               SSL_R_DH_PUBLIC_VALUE_LENGTH_IS_WRONG);

        goto err;

    }

    skey = s->s3->tmp.pkey;

    if (skey == NULL) {

        *al = SSL_AD_HANDSHAKE_FAILURE;