commit | ec014083890a70ce3bb93e797d4970e3ab98b970 | [log] [tgz] |
---|---|---|
author | Hanno Becker <hanno.becker@arm.com> | Fri Jul 26 08:20:27 2019 +0100 |
committer | Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> | Thu Aug 01 09:51:54 2019 +0200 |
tree | 89f46eb649b799c38b1f64c4243b269b97ee05c8 | |
parent | 8061c6e894293bb09d6926470392144c1f383612 [diff] |
Reintroduce length 0 check for records
diff --git a/library/ssl_tls.c b/library/ssl_tls.c index 22ee6fc..6dd509e 100644 --- a/library/ssl_tls.c +++ b/library/ssl_tls.c
@@ -4946,6 +4946,9 @@ rec->buf = buf; rec->buf_len = rec->data_offset + rec->data_len; + if( rec->data_len == 0 ) + return( MBEDTLS_ERR_SSL_INVALID_RECORD ); + /* * DTLS-related tests. * Check epoch before checking length constraint because