Tighten extension handling
authorMatt Caswell <matt@openssl.org>
Thu, 30 Apr 2015 14:20:25 +0000 (15:20 +0100)
committerMatt Caswell <matt@openssl.org>
Wed, 10 Jun 2015 09:24:49 +0000 (10:24 +0100)
commitd272599277092d6cd054417cf671453ca5fd0d9b
tree217daab268e8603472a47b34707029a61fa57cb0
parentb3c02473f7a22b19cbf86d5012d05a9d6a2c5f4d
Tighten extension handling

This adds additional checks to the processing of extensions in a ClientHello
to ensure that either no extensions are present, or if they are then they
take up the exact amount of space expected.

With thanks to the Open Crypto Audit Project for reporting this issue.

Reviewed-by: Stephen Henson <steve@openssl.org>
Conflicts:
ssl/t1_lib.c
ssl/t1_lib.c