feedc0de/wolfssl
1
0
Fork 0
forked from wolfSSL/wolfssl
Code Pull Requests Activity

wolfio: EmbedRecvFrom: check ipv6 peer on non-ipv6 version

Browse Source
This commit is contained in:
Marco Oliverio
2023-02-21 13:27:45 +00:00
parent b4542ed270
commit 640f9cf967
1 changed files with 21 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
src/wolfio.c
View File

@@ -385,6 +385,15 @@ static int sockAddrEqual(
return 0; return 0;
} }
#ifndef WOLFSSL_IPV6
static int PeerIsIpv6(const SOCKADDR_S *peer, XSOCKLENT len)
{
if (len < sizeof(peer->ss_family))
return 0;
return peer->ss_family == WOLFSSL_IP6;
}
#endif /* !WOLFSSL_IPV6 */
static int isDGramSock(int sfd) static int isDGramSock(int sfd)
{ {
char type = 0; char type = 0;
@@ -425,6 +434,12 @@ int EmbedReceiveFrom(WOLFSSL *ssl, char *buf, int sz, void *ctx)
peer = NULL; peer = NULL;
} }
else if (dtlsCtx->userSet) { else if (dtlsCtx->userSet) {
#ifndef WOLFSSL_IPV6
if (PeerIsIpv6((SOCKADDR_S*)dtlsCtx->peer.sa, dtlsCtx->peer.sz)) {
WOLFSSL_MSG("ipv6 dtls peer set but no ipv6 support compiled");
return NOT_COMPILED_IN;
}
#endif
peer = &lclPeer; peer = &lclPeer;
XMEMSET(&lclPeer, 0, sizeof(lclPeer)); XMEMSET(&lclPeer, 0, sizeof(lclPeer));
peerSz = sizeof(lclPeer); peerSz = sizeof(lclPeer);
@@ -617,6 +632,12 @@ int EmbedSendTo(WOLFSSL* ssl, char *buf, int sz, void *ctx)
else if (!dtlsCtx->connected) { else if (!dtlsCtx->connected) {
peer = (const SOCKADDR_S*)dtlsCtx->peer.sa; peer = (const SOCKADDR_S*)dtlsCtx->peer.sa;
peerSz = dtlsCtx->peer.sz; peerSz = dtlsCtx->peer.sz;
#ifndef WOLFSSL_IPV6
if (PeerIsIpv6(peer, peerSz)) {
WOLFSSL_MSG("ipv6 dtls peer setted but no ipv6 support compiled");
return NOT_COMPILED_IN;
}
#endif
} }
sent = (int)DTLS_SENDTO_FUNCTION(sd, buf, sz, ssl->wflags, sent = (int)DTLS_SENDTO_FUNCTION(sd, buf, sz, ssl->wflags,