]> git.ipfire.org Git - thirdparty/strongswan.git/commit
tls: Check for minimal TLS record length before each record iteration
authorMartin Willi <martin@revosec.ch>
Fri, 21 Mar 2014 08:29:44 +0000 (09:29 +0100)
committerMartin Willi <martin@revosec.ch>
Mon, 31 Mar 2014 13:56:12 +0000 (15:56 +0200)
commitf93497507fbdfb3dfdfc2ca830a9ced73d86dab1
tree6a7269db9b2d17f3cddd2f5e8d1145de2fd39308
parentb886dad49865c08c99e97652fe18666289f695d0
tls: Check for minimal TLS record length before each record iteration

Fixes fragment reassembling if a buffer contains more than one record, but
the last record contains a partial TLS record header. Thanks to Nick Saunders
and Jamil Nimeh for identifying this issue and providing a fix for it.
src/libtls/tls.c