wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-05 12:50:51 +02:00
Code Issues Packages Projects Releases Wiki Activity

add missing checks in wolfSSL_d2i_SSL_SESSION

Browse Source
This commit is contained in:
Reda Chouk
2026-02-06 17:00:42 +01:00
parent 25db90afe7
commit f94eb68ea3
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/ssl_sess.c
+8
View File
@@ -2827,12 +2827,20 @@ WOLFSSL_SESSION* wolfSSL_d2i_SSL_SESSION(WOLFSSL_SESSION** sess,
goto end;
}
s->chain.count = data[idx++];
if (s->chain.count > MAX_CHAIN_DEPTH) {
ret = BUFFER_ERROR;
goto end;
}
for (j = 0; j < s->chain.count; j++) {
if (i - idx < OPAQUE16_LEN) {
ret = BUFFER_ERROR;
goto end;
}
ato16(data + idx, &length); idx += OPAQUE16_LEN;
if (length > MAX_X509_SIZE) {
ret = BUFFER_ERROR;
goto end;
}
s->chain.certs[j].length = length;
if (i - idx < length) {
ret = BUFFER_ERROR;