commit ac03052f22f9cb995836c46920c30b4170da9ee5
author Manuel Pégourié-Gonnard <mpg@elzevir.fr> Tue Sep 02 14:23:40 2014 +0200
committer Paul Bakker <p.j.bakker@polarssl.org> Tue Oct 21 16:30:23 2014 +0200
tree c002d05eca212184d99a0a7c08f5758606dd9a43
parent f1499f602e9a5326dad28db4b5e97d4934fd5712

Fix segfault with some very short fragments

library/ssl_tls.c

diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index 39d93f9..d73333a 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -2140,6 +2140,16 @@
     {
         size_t first_byte_idx = offset / 8;
 
+        /* Special case */
+        if( len <= start_bits )
+        {
+            for( ; len != 0; len-- )
+                mask[first_byte_idx] |= 1 << ( start_bits - len );
+
+            /* Avoid potential issues with offset or len becoming invalid */
+            return;
+        }
+
         offset += start_bits; /* Now offset % 8 == 0 */
         len -= start_bits;