wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-06 09:20:49 +02:00
Code Issues Packages Projects Releases Wiki Activity

Unconditionally validate TLS 1.2 ciphertext size in ProcessReply F-1476

Browse Source
This commit is contained in:
Juliusz Sosinowicz
2026-04-03 10:03:17 +02:00
parent f28fd3746b
commit f2b9e3d654
1 changed files with 3 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/internal.c
+3 -7
View File
@@ -23005,9 +23005,7 @@ default:
}
if (IsEncryptionOn(ssl, 0)) {
#if defined(WOLFSSL_TLS13) || defined(WOLFSSL_EXTRA_ALERTS)
int tooLong = 0;
#endif
#ifdef WOLFSSL_TLS13
if (IsAtLeastTLSv1_3(ssl->version)) {
@@ -23017,18 +23015,16 @@ default:
MAX_TLS13_PLAIN_SZ;
}
}
else
#endif
#ifdef WOLFSSL_EXTRA_ALERTS
if (!IsAtLeastTLSv1_3(ssl->version))
{
tooLong = ssl->curSize > MAX_TLS_CIPHER_SZ;
#endif
#if defined(WOLFSSL_TLS13) || defined(WOLFSSL_EXTRA_ALERTS)
}
if (tooLong) {
WOLFSSL_MSG("Encrypted data too long");
SendAlert(ssl, alert_fatal, record_overflow);
return BUFFER_ERROR;
}
#endif
}
ssl->keys.padSz = 0;