coverty: fix CID 1361873

diff --git a/src/app-layer-ssl.c b/src/app-layer-ssl.c
index f9e1a1770baa6070310c36f0a25dd5286b260943..d1801be6697b5cac6215ae151ddc5a381ddec4e3 100644 (file)
--- a/src/app-layer-ssl.c
+++ b/src/app-layer-ssl.c
@@ -278,6 +278,9 @@ static int TLSDecodeHandshakeHello(SSLState *ssl_state, uint8_t *input,
     uint16_t extensions_len = input[0] << 8 | input[1];
     input += 2;
 
+    if (!(HAS_SPACE(extensions_len)))
+        goto invalid_length;
+
     uint16_t processed_len = 0;
     while (processed_len < extensions_len)
     {