From c0dc3091e199b37d6e56472efca593038ed9bcc1 Mon Sep 17 00:00:00 2001
From: Sean Parkinson <sean@wolfssl.com>
Date: Fri, 3 Apr 2020 16:03:41 +1000
Subject: [PATCH] GNU TLS server sends empty CSR extension

---
 src/tls.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/tls.c b/src/tls.c
index f041d16a9..6db110899 100644
--- a/src/tls.c
+++ b/src/tls.c
@@ -3046,6 +3046,8 @@ static int TLSX_CSR_Parse(WOLFSSL* ssl, byte* input, word16 length,
         word16 offset = 0;
         word16 size = 0;
 
+        if (length == 0)
+            return 0;
         if (length < ENUM_LEN)
             return BUFFER_ERROR;