]> git.ipfire.org Git - thirdparty/openssl.git/commit
tls_common.c: prevent max_early_data overflow in rlayer_early_data_count_ok()
authorAbel Tom <abeltom.kernel@gmail.com>
Thu, 18 Jun 2026 11:58:35 +0000 (13:58 +0200)
committerEugene Syromiatnikov <esyr@openssl.org>
Sun, 21 Jun 2026 23:48:56 +0000 (01:48 +0200)
commitd41a9225196be4863e7b72a152769a93f9faf917
tree21c064ee3249f034ddf7523c8094fefd07443a02
parent39f46844c6e06e26bea34f300c7fc61c06bb20b8
tls_common.c: prevent max_early_data overflow in rlayer_early_data_count_ok()

Make the local max_early_data variable uint64_t so an overflow
cannot occur if the max_early_data field in the record layer struct
has the maximum value: UNT32_MAX (0xFFFFFFFF).

Resolves: https://github.com/openssl/openssl/issues/31533

Reviewed-by: Eugene Syromiatnikov <esyr@openssl.org>
Reviewed-by: Frederik Wedel-Heinen <fwh.openssl@gmail.com>
Reviewed-by: Tim Hudson <tjh@openssl.org>
MergeDate: Sun Jun 21 23:50:02 2026
(Merged from https://github.com/openssl/openssl/pull/31538)
ssl/record/methods/tls_common.c