feedc0de/wolfssl
1
0
Fork 0
forked from wolfSSL/wolfssl
Code Pull Requests Activity

TLS supported curve extension - validate support fix

Browse Source 
Check curve name is in range before checking for disabled
This commit is contained in:
Sean Parkinson
2019-11-20 08:49:41 +10:00
parent 1a3455110e
commit c7f7d1b193
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/tls.c
View File

@@ -4268,6 +4268,10 @@ int TLSX_ValidateSupportedCurves(WOLFSSL* ssl, byte first, byte second) {
curve = curve->next) { curve = curve->next) {
#ifdef OPENSSL_EXTRA #ifdef OPENSSL_EXTRA
/* skip if name is not in supported ECC range */
if (curve->name > WOLFSSL_ECC_X25519)
continue;
/* skip if curve is disabled by user */
if (ssl->ctx->disabledCurves & (1 << curve->name)) if (ssl->ctx->disabledCurves & (1 << curve->name))
continue; continue;
#endif #endif