Suyu/mbedtls
1
0
Fork 0
mirror of https://git.suyu.dev/suyu/mbedtls.git synced 2025-12-22 13:56:42 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add a length check in ssl_derive_keys()

Browse source
This commit is contained in:
Manuel Pégourié-Gonnard 2014-01-18 18:22:55 +01:00 • committed by Paul Bakker
parent 2f5217ea02
commit 7cfdcb8c7f
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
library/ssl_tls.c
View file

@ -596,6 +596,12 @@ int ssl_derive_keys( ssl_context *ssl )
#if defined(POLARSSL_SSL_PROTO_SSL3) #if defined(POLARSSL_SSL_PROTO_SSL3)
if( ssl->minor_ver == SSL_MINOR_VERSION_0 ) if( ssl->minor_ver == SSL_MINOR_VERSION_0 )
{ {
if( transform->maclen > sizeof transform->mac_enc )
{
SSL_DEBUG_MSG( 1, ( "should never happen" ) );
return( POLARSSL_ERR_SSL_FEATURE_UNAVAILABLE );
}
memcpy( transform->mac_enc, mac_enc, transform->maclen ); memcpy( transform->mac_enc, mac_enc, transform->maclen );
memcpy( transform->mac_dec, mac_dec, transform->maclen ); memcpy( transform->mac_dec, mac_dec, transform->maclen );
} }