Latest update.
This commit is contained in:
+8
-6
@@ -914,8 +914,9 @@ int SSL_CTX_use_serverinfo_file(SSL_CTX *ctx, const char *file)
|
||||
long extension_length = 0;
|
||||
char *name = NULL;
|
||||
char *header = NULL;
|
||||
char namePrefix1[] = "SERVERINFO FOR ";
|
||||
char namePrefix2[] = "SERVERINFOV2 FOR ";
|
||||
static const char namePrefix1[] = "SERVERINFO FOR ";
|
||||
static const char namePrefix2[] = "SERVERINFOV2 FOR ";
|
||||
unsigned int name_len;
|
||||
int ret = 0;
|
||||
BIO *bin = NULL;
|
||||
size_t num_extensions = 0, contextoff = 0;
|
||||
@@ -951,19 +952,20 @@ int SSL_CTX_use_serverinfo_file(SSL_CTX *ctx, const char *file)
|
||||
break;
|
||||
}
|
||||
/* Check that PEM name starts with "BEGIN SERVERINFO FOR " */
|
||||
if (strlen(name) < strlen(namePrefix1)) {
|
||||
name_len = strlen(name);
|
||||
if (name_len < sizeof(namePrefix1) - 1) {
|
||||
SSLerr(SSL_F_SSL_CTX_USE_SERVERINFO_FILE, SSL_R_PEM_NAME_TOO_SHORT);
|
||||
goto end;
|
||||
}
|
||||
if (strncmp(name, namePrefix1, strlen(namePrefix1)) == 0) {
|
||||
if (strncmp(name, namePrefix1, sizeof(namePrefix1) - 1) == 0) {
|
||||
version = SSL_SERVERINFOV1;
|
||||
} else {
|
||||
if (strlen(name) < strlen(namePrefix2)) {
|
||||
if (name_len < sizeof(namePrefix2) - 1) {
|
||||
SSLerr(SSL_F_SSL_CTX_USE_SERVERINFO_FILE,
|
||||
SSL_R_PEM_NAME_TOO_SHORT);
|
||||
goto end;
|
||||
}
|
||||
if (strncmp(name, namePrefix2, strlen(namePrefix2)) != 0) {
|
||||
if (strncmp(name, namePrefix2, sizeof(namePrefix2) - 1) != 0) {
|
||||
SSLerr(SSL_F_SSL_CTX_USE_SERVERINFO_FILE,
|
||||
SSL_R_PEM_NAME_BAD_PREFIX);
|
||||
goto end;
|
||||
|
||||
Reference in New Issue
Block a user