Validate ClientHello session_id field length and send alert on failure
authorAlessandro Ghedini <alessandro@ghedini.me>
Thu, 8 Oct 2015 17:56:03 +0000 (19:56 +0200)
committerMatt Caswell <matt@openssl.org>
Tue, 19 Jan 2016 15:53:23 +0000 (15:53 +0000)
commit293b5ca47767005e0341b450eef82633f48359f3
treeaa280d8d9e3af25059d17ec73848cd1c243594e2
parentaa291c62a7c227d94073c8cd4ce81aa6950d72d7
Validate ClientHello session_id field length and send alert on failure

RT#4080

Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
ssl/ssl_sess.c
ssl/statem/statem_srvr.c