Merge pull request #10201 from gasbytes/quic_record_cap

add missing WOLFSSL_QUIC_MAX_RECORD_CAPACITY check on the early-data
This commit is contained in:
Sean Parkinson
2026-04-16 08:42:35 +10:00
committed by GitHub
2 changed files with 65 additions and 0 deletions
+5
View File
@@ -76,6 +76,11 @@ static QuicRecord *quic_record_make(WOLFSSL *ssl,
qr->level = level;
if (level == wolfssl_encryption_early_data) {
qr->capacity = qr->len = (word32)len;
if (qr->capacity > WOLFSSL_QUIC_MAX_RECORD_CAPACITY) {
WOLFSSL_MSG("QUIC early data length larger than expected");
quic_record_free(ssl, qr);
return NULL;
}
}
else {
qr->capacity = qr->len = (word32) qr_length(data, len);