mirrors/wolfssl
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

sanity check on length before ato16 with SRTP

Browse Source
This commit is contained in:
JacobBarthelmeh 2023-10-28 16:13:45 -06:00
parent a05f4f4dd9
commit 07c8c5c8ca
1 changed files with 6 additions and 0 deletions

6
src/tls.c

@ -5685,6 +5685,12 @@ static int TLSX_UseSRTP_Parse(WOLFSSL* ssl, const byte* input, word16 length,
/* parse remainder one profile at a time, looking for match in CTX */
ret = 0;
for (i=offset; i<length; i+=OPAQUE16_LEN) {
if (length < (i + OPAQUE16_LEN)) {
WOLFSSL_MSG("Unexpected length when parsing SRTP profile");
ret = BUFFER_ERROR;
break;
}
ato16(input+i, &profile_value);
/* find first match */
if (profile_value < 16 &&