MatrixSSL 4.1.0

2019-04-17 13:34:22 +03:00
parent 683513ee5c
commit dbc2786c73
173 changed files with 15868 additions and 4077 deletions
--- a/matrixssl/extDecode.c
+++ b/matrixssl/extDecode.c
@@ -209,6 +209,12 @@ int32 parseClientHelloExtensions(ssl_t *ssl, unsigned char **cp, unsigned short
 # endif
        while (c != end)
        {
+            if (end - c < 2)
+            {
+                ssl->err = SSL_ALERT_DECODE_ERROR;
+                psTraceErrr("Invalid extension header len\n");
+                return MATRIXSSL_ERROR;
+            }
            extType = *c << 8; c++; /* Individual hello ext */
            extType += *c; c++;
            if (end - c < 2)