Tighten extension handling
authorMatt Caswell <matt@openssl.org>
Thu, 30 Apr 2015 14:20:25 +0000 (15:20 +0100)
committerMatt Caswell <matt@openssl.org>
Wed, 10 Jun 2015 09:09:57 +0000 (10:09 +0100)
commit54e3ad003bdf83f189b2bf17fb998c028d39c8eb
treeb51a598bbf9e1036fa0b75bb9a946936a3eb5425
parentaec54108ef0d469964505ac1f77984f19099ec05
Tighten extension handling

This adds additional checks to the processing of extensions in a ClientHello
to ensure that either no extensions are present, or if they are then they
take up the exact amount of space expected.

With thanks to the Open Crypto Audit Project for reporting this issue.

Reviewed-by: Stephen Henson <steve@openssl.org>
ssl/t1_lib.c