feedc0de/wolfssl
1
0
Fork 0
forked from wolfSSL/wolfssl
Code Pull Requests Activity

In TLS 1.3, don't allow multiple ChangeCipherSpecs in a row

Browse Source
This commit is contained in:
Sean Parkinson
2020-04-27 15:27:02 +10:00
parent 5376763638
commit df1b7f34f1
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
src/internal.c
View File

@ -15157,6 +15157,7 @@ int ProcessReply(WOLFSSL* ssl)
} }
else { else {
#ifdef WOLFSSL_TLS13 #ifdef WOLFSSL_TLS13
ssl->msgsReceived.got_change_cipher = 0;
ret = DoTls13HandShakeMsg(ssl, ret = DoTls13HandShakeMsg(ssl,
ssl->buffers.inputBuffer.buffer, ssl->buffers.inputBuffer.buffer,
&ssl->buffers.inputBuffer.idx, &ssl->buffers.inputBuffer.idx,
@ -15219,6 +15220,13 @@ int ProcessReply(WOLFSSL* ssl)
return UNKNOWN_RECORD_TYPE; return UNKNOWN_RECORD_TYPE;
} }
ssl->buffers.inputBuffer.idx++; ssl->buffers.inputBuffer.idx++;
if (!ssl->msgsReceived.got_change_cipher) {
ssl->msgsReceived.got_change_cipher = 1;
}
else {
SendAlert(ssl, alert_fatal, illegal_parameter);
return UNKNOWN_RECORD_TYPE;
}
break; break;
} }
#endif #endif