From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Sun, 22 Feb 2015 10:47:25 +0000 (+0100)
Subject: added comments
X-Git-Tag: gnutls_3_4_0~285
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=b3da58f9610f73c7df1e0dfa4ea99b546eeaaef4;p=thirdparty%2Fgnutls.git

added comments
---

diff --git a/lib/algorithms/ciphersuites.c b/lib/algorithms/ciphersuites.c
index 5effbf1ae7..5cf729a784 100644
--- a/lib/algorithms/ciphersuites.c
+++ b/lib/algorithms/ciphersuites.c
@@ -1228,7 +1228,7 @@ _gnutls_remove_unwanted_ciphersuites(gnutls_session_t session,
 	    session->security_parameters.entity == GNUTLS_SERVER ? 1 : 0;
 	gnutls_kx_algorithm_t alg[MAX_ALGOS];
 	int alg_size = MAX_ALGOS;
-	uint8_t new_list[cipher_suites_size];
+	uint8_t new_list[cipher_suites_size]; /* it's safe to use that size because it's provided by _gnutls_supported_ciphersuites() */
 	int i, new_list_size = 0;
 	const gnutls_cipher_suite_entry *entry;
 	const uint8_t *cp;
diff --git a/lib/gnutls_handshake.c b/lib/gnutls_handshake.c
index 038b323a71..aa5d69d79f 100644
--- a/lib/gnutls_handshake.c
+++ b/lib/gnutls_handshake.c
@@ -1847,7 +1847,7 @@ copy_ciphersuites(gnutls_session_t session,
 		  gnutls_buffer_st * cdata, int add_scsv)
 {
 	int ret;
-	uint8_t cipher_suites[MAX_CIPHERSUITE_SIZE + 2];
+	uint8_t cipher_suites[MAX_CIPHERSUITE_SIZE + 2]; /* allow space for SCSV */
 	int cipher_suites_size;
 	size_t init_length = cdata->length;