commit fc834f2e2c8210ff8115135ad31eb8e54c076609
author Neil Armstrong <narmstrong@baylibre.com> Wed Mar 23 17:54:38 2022 +0100
committer Neil Armstrong <narmstrong@baylibre.com> Tue Apr 05 10:29:53 2022 +0200
tree 56e26ddd16ababcb3e8d08e30849817076b9bd65
parent 0bdb68a2428af036005aa45aa8b85a751494f73e

Introduce content_len_size  variable in ECHDE-PSK part of ssl_write_client_key_exchange()

Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>

library/ssl_tls12_client.c

diff --git a/library/ssl_tls12_client.c b/library/ssl_tls12_client.c
index d372663..92c1cd3 100644
--- a/library/ssl_tls12_client.c
+++ b/library/ssl_tls12_client.c
@@ -3025,10 +3025,14 @@
         if( ssl_conf_has_static_raw_psk( ssl->conf ) == 0 )
             return( MBEDTLS_ERR_SSL_FEATURE_UNAVAILABLE );
 
+        /* uint16 to store content length */
+        const size_t content_len_size = 2;
+
         header_len = 4;
         content_len = ssl->conf->psk_identity_len;
 
-        if( header_len + 2 + content_len > MBEDTLS_SSL_OUT_CONTENT_LEN )
+        if( header_len + content_len_size + content_len
+                    > MBEDTLS_SSL_OUT_CONTENT_LEN )
         {
             MBEDTLS_SSL_DEBUG_MSG( 1,
                 ( "psk identity too long or SSL buffer too short" ) );