Merge pull request #7683 from SparkiDev/def_ticket_cb_inlen

SSL default ticket encryption callback: check in len on decrypt
This commit is contained in:
JacobBarthelmeh
2024-06-28 16:04:58 -06:00
committed by GitHub

View File

@ -38846,6 +38846,10 @@ static int DefTicketEncCb(WOLFSSL* ssl, byte key_name[WOLFSSL_TICKET_NAME_SZ],
WOLFSSL_ENTER("DefTicketEncCb");
if ((!enc) && (inLen != sizeof(InternalTicket))) {
return BUFFER_E;
}
/* Check we have setup the RNG, name and primary key. */
if (keyCtx->expirary[0] == 0) {
#ifndef SINGLE_THREADED