Tighten extension handling
authorMatt Caswell <matt@openssl.org>
Thu, 30 Apr 2015 14:20:25 +0000 (15:20 +0100)
committerMatt Caswell <matt@openssl.org>
Wed, 10 Jun 2015 09:32:05 +0000 (10:32 +0100)
commit72df35acf268e21adfe5b90b89f90e35e9db29bf
tree3a2c62d89632f758753df14d10f07bf093a53fb4
parentf92b1967234fd7926b476768584fa5573eaadd72
Tighten extension handling

This adds additional checks to the processing of extensions in a ClientHello
to ensure that either no extensions are present, or if they are then they
take up the exact amount of space expected.

With thanks to the Open Crypto Audit Project for reporting this issue.

Reviewed-by: Stephen Henson <steve@openssl.org>
Conflicts:
ssl/t1_lib.c
ssl/t1_lib.c