Add extra checks for odd-length EC curve lists.
authorEmilia Kasper <emilia@openssl.org>
Mon, 1 Dec 2014 15:55:55 +0000 (16:55 +0100)
committerEmilia Kasper <emilia@openssl.org>
Fri, 5 Dec 2014 17:24:54 +0000 (18:24 +0100)
commit533814c6b52b9beabe572dd428afc53732e4ce3f
treebc77e6b8802c6375f42b1d396d6caf00da0058f1
parentb32474a40ba3735f674c508795f92c4a5ebbe825
Add extra checks for odd-length EC curve lists.

Odd-length lists should be rejected everywhere upon parsing. Nevertheless,
be extra careful and add guards against off-by-one reads.

Also, drive-by replace inexplicable double-negation with an explicit comparison.

Reviewed-by: Matt Caswell <matt@openssl.org>
ssl/ssl.h
ssl/ssl_err.c
ssl/t1_lib.c