feedc0de/wolfssl
1
0
Fork 0
forked from wolfSSL/wolfssl
Code Pull Requests Activity

Resolves issue with reassembling large certificates. The ProcessPeerCerts function was using the wrong max size check for certs. Built and test with ./configure CFLAGS="-DMAX_CERTIFICATE_SZ=20000".

Browse Source
This commit is contained in:
David Garske
2018-06-07 15:56:37 -07:00
parent b63d3173a1
commit 00ddeb07d8
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/internal.c
View File

@ -8276,7 +8276,7 @@ int ProcessPeerCerts(WOLFSSL* ssl, byte* input, word32* inOutIdx,
} }
c24to32(input + args->idx, &listSz); c24to32(input + args->idx, &listSz);
args->idx += OPAQUE24_LEN; args->idx += OPAQUE24_LEN;
if (listSz > MAX_RECORD_SIZE) { if (listSz > MAX_CERTIFICATE_SZ) {
ERROR_OUT(BUFFER_ERROR, exit_ppc); ERROR_OUT(BUFFER_ERROR, exit_ppc);
} }
if ((args->idx - args->begin) + listSz != totalSz) { if ((args->idx - args->begin) + listSz != totalSz) {