commit b48894eca4a07a20a2806791765cf19471d80f8a
author XiaokangQian <xiaokang.qian@arm.com> Mon Jan 17 02:05:52 2022 +0000
committer XiaokangQian <xiaokang.qian@arm.com> Wed Jan 26 10:51:13 2022 +0000
tree b649148fd3e8ef6e0e86ef95d78d98b2c65f8dce
parent 16acd4b3e45b039917a82b237700849c81781425

Add buffer check for named group

Signed-off-by: XiaokangQian <xiaokang.qian@arm.com>

library/ssl_tls13_client.c

diff --git a/library/ssl_tls13_client.c b/library/ssl_tls13_client.c
index c54cb75..3b2313a 100644
--- a/library/ssl_tls13_client.c
+++ b/library/ssl_tls13_client.c
@@ -438,6 +438,7 @@
     MBEDTLS_SSL_DEBUG_BUF( 3, "key_share extension", p, end - buf );
 
     /* Read selected_group */
+    MBEDTLS_SSL_CHK_BUF_READ_PTR( p, end, 2 );
     tls_id = MBEDTLS_GET_UINT16_BE( p, 0 );
     MBEDTLS_SSL_DEBUG_MSG( 3, ( "selected_group ( %d )", tls_id ) );