wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-05 18:30:48 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #9949 from philljj/fix_d2i_SSL_SESSION

Browse Source 
ssl_sess: check fields in wolfSSL_d2i_SSL_SESSION.
This commit is contained in:
JacobBarthelmeh
2026-03-12 14:45:29 -06:00
committed by GitHub
parent c1f71fcf33 0a99a08b0f
commit 67abcc6f2d
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/ssl_sess.c
+12
View File
@@ -2795,6 +2795,10 @@ WOLFSSL_SESSION* wolfSSL_d2i_SSL_SESSION(WOLFSSL_SESSION** sess,
ato32(data + idx, &s->bornOn); idx += OPAQUE32_LEN;
ato32(data + idx, &s->timeout); idx += OPAQUE32_LEN;
s->sessionIDSz = data[idx++];
if (s->sessionIDSz > ID_LEN) {
ret = BUFFER_ERROR;
goto end;
}
/* sessionID | secret | haveEMS | haveAltSessionID */
if (i - idx < s->sessionIDSz + SECRET_LEN + OPAQUE8_LEN + OPAQUE8_LEN) {
@@ -2877,6 +2881,10 @@ WOLFSSL_SESSION* wolfSSL_d2i_SSL_SESSION(WOLFSSL_SESSION** sess,
goto end;
}
ato16(data + idx, &s->idLen); idx += OPAQUE16_LEN;
if (s->idLen > SERVER_ID_LEN) {
ret = BUFFER_ERROR;
goto end;
}
/* ServerID */
if (i - idx < s->idLen) {
@@ -2892,6 +2900,10 @@ WOLFSSL_SESSION* wolfSSL_d2i_SSL_SESSION(WOLFSSL_SESSION** sess,
goto end;
}
s->sessionCtxSz = data[idx++];
if (s->sessionCtxSz > ID_LEN) {
ret = BUFFER_ERROR;
goto end;
}
/* app session context ID */
if (i - idx < s->sessionCtxSz) {