diff options
| author | Nikos Mavrogiannopoulos <nmav@redhat.com> | 2016-10-14 10:08:35 +0200 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@redhat.com> | 2016-10-14 11:37:23 +0200 |
| commit | cc13856fd3bff6cc1918851ae2c3618a3453fbe5 (patch) | |
| tree | 303a21b67f0a9c926166abac0ea0443bd92110da | |
| parent | a7698b53df8b7d09600964a34417c5169b426c9e (diff) | |
| download | gnutls-cc13856fd3bff6cc1918851ae2c3618a3453fbe5.tar.gz | |
record: disallow parsing of alert messages prior to session start
| -rw-r--r-- | lib/record.c | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/lib/record.c b/lib/record.c index 69cd6c2871..9f3f864d2b 100644 --- a/lib/record.c +++ b/lib/record.c @@ -762,6 +762,11 @@ record_add_to_buffers(gnutls_session_t session, gnutls_alert_get_name((int) bufel->msg. data[1])); + if (!session->internals.initial_negotiation_completed && + session->internals.handshake_in_progress && STATE == STATE0) { /* handshake hasn't started */ + return gnutls_assert_val(GNUTLS_E_UNEXPECTED_PACKET); + } + session->internals.last_alert = bufel->msg.data[1]; /* if close notify is received and @@ -778,7 +783,6 @@ record_add_to_buffers(gnutls_session_t session, /* if the alert is FATAL or WARNING * return the apropriate message */ - gnutls_assert(); ret = GNUTLS_E_WARNING_ALERT_RECEIVED; if (bufel->msg.data[0] == GNUTLS_AL_FATAL) { |