yuzu-emu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-11-29 15:04:18 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix possible signedness issue in time comparison

Browse Source
This commit is contained in:
Manuel Pégourié-Gonnard 2015-05-20 11:41:36 +02:00
parent 0849a0a910
commit 8eff512274
1 changed files with 9 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
library/ssl_ticket.c
View File

@ -387,11 +387,16 @@ int mbedtls_ssl_ticket_parse( void *p_ticket,
goto cleanup; goto cleanup;
#if defined(MBEDTLS_HAVE_TIME) #if defined(MBEDTLS_HAVE_TIME)
/* Check if still valid */
if( ( time( NULL) - session->start ) > ctx->ticket_lifetime )
{ {
ret = MBEDTLS_ERR_SSL_SESSION_TICKET_EXPIRED; /* Check for expiration */
goto cleanup; time_t current_time = time( NULL );
if( current_time < session->start ||
(uint32_t)( current_time - session->start ) > ctx->ticket_lifetime )
{
ret = MBEDTLS_ERR_SSL_SESSION_TICKET_EXPIRED;
goto cleanup;
}
} }
#endif #endif