]> git.ipfire.org Git - thirdparty/openssl.git/commit - ssl/quic/quic_channel.c
NewSessionTickets with an early_data extension must have a valid max value
authorMatt Caswell <matt@openssl.org>
Mon, 7 Aug 2023 11:21:20 +0000 (12:21 +0100)
committerMatt Caswell <matt@openssl.org>
Tue, 15 Aug 2023 13:41:31 +0000 (14:41 +0100)
commit04c7fb53e0437f83e2476e5d55a1af61959fadf5
tree0023be1df9fe26d0e5f8a9da397d7f980d4d67f4
parent0f2add9e8d4c1dc09848ea12aaad2eb4c5358bf2
NewSessionTickets with an early_data extension must have a valid max value

The max_early_data value must be 0xffffffff if the extension is present in
a NewSessionTicket message in QUIC. Otherwise it is a PROTOCOL_VIOLATION.

Reviewed-by: Hugo Landau <hlandau@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21686)
include/internal/quic_tls.h
ssl/quic/quic_channel.c
ssl/quic/quic_tls.c
ssl/statem/extensions_clnt.c