added comments

diff --git a/lib/algorithms/ciphersuites.c b/lib/algorithms/ciphersuites.c
index 5effbf1ae79d8cfb7a3c852e0599d66cf91c8e31..5cf729a7840312da5ef46509c8da1c902123f0a4 100644 (file)
--- a/lib/algorithms/ciphersuites.c
+++ b/lib/algorithms/ciphersuites.c
@@ -1228,7 +1228,7 @@ _gnutls_remove_unwanted_ciphersuites(gnutls_session_t session,
            session->security_parameters.entity == GNUTLS_SERVER ? 1 : 0;
        gnutls_kx_algorithm_t alg[MAX_ALGOS];
        int alg_size = MAX_ALGOS;
-       uint8_t new_list[cipher_suites_size];
+       uint8_t new_list[cipher_suites_size]; /* it's safe to use that size because it's provided by _gnutls_supported_ciphersuites() */
        int i, new_list_size = 0;
        const gnutls_cipher_suite_entry *entry;
        const uint8_t *cp;

diff --git a/lib/gnutls_handshake.c b/lib/gnutls_handshake.c
index 038b323a710723638f3406940d58b865d197b482..aa5d69d79f410fed6a09c84d633d416bfef93780 100644 (file)
--- a/lib/gnutls_handshake.c
+++ b/lib/gnutls_handshake.c
@@ -1847,7 +1847,7 @@ copy_ciphersuites(gnutls_session_t session,
                  gnutls_buffer_st * cdata, int add_scsv)
 {
        int ret;
-       uint8_t cipher_suites[MAX_CIPHERSUITE_SIZE + 2];
+       uint8_t cipher_suites[MAX_CIPHERSUITE_SIZE + 2]; /* allow space for SCSV */
        int cipher_suites_size;
        size_t init_length = cdata->length;