Commit fcb61b6c authored by Matt Caswell's avatar Matt Caswell
Browse files

Add sanity check to PRF 



The function tls1_PRF counts the number of digests in use and partitions
security evenly between them. There always needs to be at least one digest
in use, otherwise this is an internal error. Add a sanity check for this.

Reviewed-by: default avatarRichard Levitte <levitte@openssl.org>
(cherry picked from commit 668f6f08)
parent b2b81639

ssl/t1_enc.c

+5 −0
Original line number Diff line number Diff line
@@ -260,6 +260,11 @@ static int tls1_PRF(long digest_mask, 
        if ((m << TLS1_PRF_DGST_SHIFT) & digest_mask)

            count++;

    }

    if(!count) {

        /* Should never happen */

        SSLerr(SSL_F_TLS1_PRF, ERR_R_INTERNAL_ERROR);

        goto err;

    }

    len = slen / count;

    if (count == 1)

        slen = 0;