From afed9d4b799090d29d92fa920d73e541cca6aa7f Mon Sep 17 00:00:00 2001
From: Juliusz Sosinowicz <juliusz@wolfssl.com>
Date: Tue, 10 Mar 2026 09:50:47 +0100
Subject: [PATCH] fixup! ProcessServerHello: verify extension lengths

---
 src/sniffer.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/sniffer.c b/src/sniffer.c
index 3e20b51637..9b07b4ef94 100644
--- a/src/sniffer.c
+++ b/src/sniffer.c
@@ -3867,7 +3867,7 @@ static int ProcessServerHello(int msgSz, const byte* input, int* sslBytes,
             }
         #endif
             case EXT_SUPPORTED_VERSIONS:
-                if (extLen < 2) {
+                if (extLen != 2) {
                     SetError(SERVER_HELLO_INPUT_STR, error, session,
                              FATAL_ERROR_STATE);
                     return WOLFSSL_FATAL_ERROR;