Check suite size length is valid as well as space for compression

This commit is contained in:
Sean Parkinson
2019-07-29 08:47:45 +10:00
parent 50fbdb961f
commit 741d7bdb67

View File

@ -3880,6 +3880,8 @@ static int DoTls13SupportedVersions(WOLFSSL* ssl, const byte* input, word32 i,
return BUFFER_ERROR;
ato16(input + i, &suiteSz);
i += OPAQUE16_LEN;
if (i + suiteSz + 1 > helloSz)
return BUFFER_ERROR;
i += suiteSz;
/* Compression */
b = input[i++];