Send decode_error alert rather than illegal_parameter when receiving an empty/malformed keyshare extension. Fixes #9640.

2026-07-05 18:00:48 +02:00 · 2026-02-04 15:40:30 -07:00
parent 4bb4648282
commit 1e770e1a0f
1 changed files with 1 additions and 1 deletions
@@ -9894,7 +9894,7 @@ static int TLSX_KeyShareEntry_Parse(const WOLFSSL* ssl, const byte* input,
    ato16(&input[offset], &keLen);
    offset += OPAQUE16_LEN;
    if (keLen == 0)
-        return INVALID_PARAMETER;
+        return BUFFER_ERROR;
    if (keLen > length - offset)
        return BUFFER_ERROR;