Add extra checks for odd-length EC curve lists.
authorEmilia Kasper <emilia@openssl.org>
Mon, 1 Dec 2014 15:55:55 +0000 (16:55 +0100)
committerEmilia Kasper <emilia@openssl.org>
Fri, 5 Dec 2014 15:57:58 +0000 (16:57 +0100)
commit740580c2b2b86c2ffdc4a2d36850248c6091d6a0
tree11c23fecf622c487754f9481d5fcf3fb41613f8f
parent33d5ba862939ff8db70a9e36fc9a326fab3e8d98
Add extra checks for odd-length EC curve lists.

Odd-length lists should be rejected everywhere upon parsing. Nevertheless,
be extra careful and add guards against off-by-one reads.

Also, drive-by replace inexplicable double-negation with an explicit comparison.

Reviewed-by: Matt Caswell <matt@openssl.org>
ssl/ssl.h
ssl/ssl_err.c
ssl/t1_lib.c