cuberite/polarssl
1
0
Fork 0
mirror of https://github.com/cuberite/polarssl.git synced 2025-09-13 00:55:29 -04:00
Code Issues Packages Projects Releases Wiki Activity

Add a length check in ssl_derive_keys()

Browse Source
This commit is contained in:
Paul Bakker 2014-07-07 15:30:20 +02:00
parent 511d809dd1
commit 4091141368
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
library/ssl_tls.c
View File

@ -526,6 +526,12 @@ int ssl_derive_keys( ssl_context *ssl )
transform->keylen, transform->minlen, transform->ivlen,
transform->maclen ) );
if( transform->maclen > sizeof transform->mac_enc )
{
SSL_DEBUG_MSG( 1, ( "should never happen" ) );
return( POLARSSL_ERR_SSL_FEATURE_UNAVAILABLE );
}
/*
* Finally setup the cipher contexts, IVs and MAC secrets.
*/