Premaster secret handling fixes
authorAdam Langley <agl@chromium.org>
Tue, 16 Dec 2014 13:03:47 +0000 (14:03 +0100)
committerEmilia Kasper <emilia@openssl.org>
Wed, 17 Dec 2014 13:01:19 +0000 (14:01 +0100)
commit4aecfd4d9f366c849c9627ab666d1b1addc024e6
tree63ac22feece3cb58678472c0c922dd3cc0bd8336
parent57dc72e018ddecf222b6c5e598793b75069d42a2
Premaster secret handling fixes

From BoringSSL
- Send an alert when the client key exchange isn't correctly formatted.
- Reject overly short RSA ciphertexts to avoid a (benign) out-of-bounds memory access.

Reviewed-by: Kurt Roeckx <kurt@openssl.org>
ssl/s3_srvr.c