mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2025-07-29 11:41:15 +03:00
@ -1501,7 +1501,7 @@ static int ssl_tls13_parse_encrypted_extensions( mbedtls_ssl_context *ssl,
|
|||||||
MBEDTLS_SSL_DEBUG_MSG(
|
MBEDTLS_SSL_DEBUG_MSG(
|
||||||
3, ( "unsupported extension found: %u ", extension_type) );
|
3, ( "unsupported extension found: %u ", extension_type) );
|
||||||
MBEDTLS_SSL_PEND_FATAL_ALERT(
|
MBEDTLS_SSL_PEND_FATAL_ALERT(
|
||||||
MBEDTLS_SSL_ALERT_MSG_UNSUPPORTED_EXT, \
|
MBEDTLS_SSL_ALERT_MSG_UNSUPPORTED_EXT,
|
||||||
MBEDTLS_ERR_SSL_UNSUPPORTED_EXTENSION );
|
MBEDTLS_ERR_SSL_UNSUPPORTED_EXTENSION );
|
||||||
return ( MBEDTLS_ERR_SSL_UNSUPPORTED_EXTENSION );
|
return ( MBEDTLS_ERR_SSL_UNSUPPORTED_EXTENSION );
|
||||||
}
|
}
|
||||||
@ -1513,7 +1513,7 @@ static int ssl_tls13_parse_encrypted_extensions( mbedtls_ssl_context *ssl,
|
|||||||
if( p != end )
|
if( p != end )
|
||||||
{
|
{
|
||||||
MBEDTLS_SSL_DEBUG_MSG( 1, ( "EncryptedExtension lengths misaligned" ) );
|
MBEDTLS_SSL_DEBUG_MSG( 1, ( "EncryptedExtension lengths misaligned" ) );
|
||||||
MBEDTLS_SSL_PEND_FATAL_ALERT( MBEDTLS_SSL_ALERT_MSG_DECODE_ERROR, \
|
MBEDTLS_SSL_PEND_FATAL_ALERT( MBEDTLS_SSL_ALERT_MSG_DECODE_ERROR,
|
||||||
MBEDTLS_ERR_SSL_DECODE_ERROR );
|
MBEDTLS_ERR_SSL_DECODE_ERROR );
|
||||||
return( MBEDTLS_ERR_SSL_DECODE_ERROR );
|
return( MBEDTLS_ERR_SSL_DECODE_ERROR );
|
||||||
}
|
}
|
||||||
|
@ -271,7 +271,7 @@ static int ssl_tls13_parse_certificate( mbedtls_ssl_context *ssl,
|
|||||||
|
|
||||||
MBEDTLS_SSL_CHK_BUF_READ_PTR( p, end, 4 );
|
MBEDTLS_SSL_CHK_BUF_READ_PTR( p, end, 4 );
|
||||||
certificate_request_context_len = p[0];
|
certificate_request_context_len = p[0];
|
||||||
certificate_list_len = ( p[1] << 16 ) | ( p[2] << 8 ) | p[3];
|
certificate_list_len = MBEDTLS_GET_UINT24_BE( p, 0 );
|
||||||
p += 4;
|
p += 4;
|
||||||
|
|
||||||
/* In theory, the certificate list can be up to 2^24 Bytes, but we don't
|
/* In theory, the certificate list can be up to 2^24 Bytes, but we don't
|
||||||
|
Reference in New Issue
Block a user