non block type ciphertext sanity checks

This commit is contained in:
toddouska 2012-12-26 10:11:15 -08:00
parent dc88a7e8eb
commit 59419bef89

View File

@ -3046,6 +3046,15 @@ static int SanityCheckCipherText(CYASSL* ssl, word32 encryptSz)
minLength = ssl->specs.hash_size + 1; /* pad byte */ minLength = ssl->specs.hash_size + 1; /* pad byte */
if (ssl->specs.block_size > minLength) if (ssl->specs.block_size > minLength)
minLength = ssl->specs.block_size; minLength = ssl->specs.block_size;
if (ssl->options.tls1_1)
minLength += ssl->specs.block_size; /* explicit IV */
}
else if (ssl->specs.cipher_type == stream) {
minLength = ssl->specs.hash_size;
}
else if (ssl->specs.cipher_type == aead) {
minLength = ssl->specs.block_size; /* actual min? */
} }
if (encryptSz < minLength) { if (encryptSz < minLength) {