- Correctly handle empty packets (Found by James Yonan)

This commit is contained in:
Paul Bakker 2012-05-30 07:39:36 +00:00
parent ce30bdf624
commit 8639578f58
2 changed files with 2 additions and 1 deletions

View File

@ -2,6 +2,7 @@ PolarSSL ChangeLog
= Version 1.1.4 released on 2012-05-30
Bugfix
* Correctly handle empty packets (Found by James Yonan)
* Fixed potential heap corruption in x509_name allocation
* Fixed single RSA test that failed on Big Endian systems (Closes ticket #54)

View File

@ -785,7 +785,7 @@ static int ssl_decrypt_buf( ssl_context *ssl )
/*
* Always compute the MAC (RFC4346, CBCTIME).
*/
if( ssl->in_msglen <= ssl->maclen + padlen )
if( ssl->in_msglen < ssl->maclen + padlen )
{
SSL_DEBUG_MSG( 1, ( "msglen (%d) < maclen (%d) + padlen (%d)",
ssl->in_msglen, ssl->maclen, padlen ) );