diff options
Diffstat (limited to 'lib/gnutls_buffers.c')
| -rw-r--r-- | lib/gnutls_buffers.c | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/lib/gnutls_buffers.c b/lib/gnutls_buffers.c index 8750863120..3d9e061eaf 100644 --- a/lib/gnutls_buffers.c +++ b/lib/gnutls_buffers.c @@ -935,12 +935,13 @@ parse_handshake_header(gnutls_session_t session, mbuffer_st * bufel, return gnutls_assert_val(GNUTLS_E_UNEXPECTED_PACKET_LENGTH); - if (hsk->length > 0 && (hsk->start_offset >= hsk->end_offset || + if (hsk->length > 0 && (hsk->start_offset > hsk->end_offset || hsk->end_offset - hsk->start_offset >= data_size - || hsk->end_offset >= hsk->length)) + || hsk->end_offset >= hsk->length)) { return gnutls_assert_val(GNUTLS_E_UNEXPECTED_PACKET_LENGTH); + } else if (hsk->length == 0 && hsk->end_offset != 0 && hsk->start_offset != 0) return |