ensure addition to application data buffers is occuring only after a successful handshake.

1 files changed, 6 insertions, 0 deletions

diff --git a/lib/gnutls_record.c b/lib/gnutls_record.c
index 8ed84f2c1d..15f4fced7f 100644
--- a/lib/gnutls_record.c
+++ b/lib/gnutls_record.c
@@ -745,6 +745,12 @@ record_check_type (gnutls_session_t session,
           return GNUTLS_E_UNEXPECTED_PACKET;
 
         case GNUTLS_APPLICATION_DATA:
+          if (session->internals.initial_negotiation_completed == 0)
+            {
+              ret = gnutls_assert_val(GNUTLS_E_UNEXPECTED_PACKET);
+              goto cleanup;
+            }
+
           /* even if data is unexpected put it into the buffer */
           if ((ret =
                _gnutls_record_buffer_put (recv_type, session,