Prevent arithmetic overflow on bounds check

This commit is contained in:
Krzysztof Stachowiak 2018-03-14 11:31:53 +01:00
parent 7040553a02
commit 0e0afacbc5

View File

@ -1859,7 +1859,7 @@ static int ssl_parse_server_psk_hint( mbedtls_ssl_context *ssl,
len = (*p)[0] << 8 | (*p)[1];
*p += 2;
if( (*p) + len > end )
if( (*p) > end -len )
{
MBEDTLS_SSL_DEBUG_MSG( 1, ( "bad server key exchange message "
"(psk_identity_hint length)" ) );