F-5728 - Widen ServerHello extension length check to avoid word16 truncation

2026-07-10 16:20:50 +02:00 · 2026-06-25 14:59:21 -07:00
parent 86e4a598b4
commit daf99ae645
1 changed files with 1 additions and 1 deletions
@@ -3913,7 +3913,7 @@ static int ProcessServerHello(int msgSz, const byte* input, int* sslBytes,
            } /* switch (extType) */

            /* make sure the extension fits in the remaining declared length */
-            if ((word16)(extLen + EXT_TYPE_SZ + LENGTH_SZ) > len) {
+            if ((word32)extLen + EXT_TYPE_SZ + LENGTH_SZ > len) {
                SetError(SERVER_HELLO_INPUT_STR, error, session,
                         FATAL_ERROR_STATE);
                return WOLFSSL_FATAL_ERROR;