diff --git a/ChangeLog b/ChangeLog index 37c79f6ff..be3861416 100644 --- a/ChangeLog +++ b/ChangeLog @@ -4,7 +4,9 @@ mbed TLS ChangeLog (Sorted per branch, date) Bugfix * Fix warning when using a 64bit platform. (found by embedthis) (#275) - + * Fix off-by-one error in parsing Supported Point Format extension that + caused some handshakes to fail. + Changes * Made X509 profile pointer const in mbedtls_ssl_conf_cert_profile() to allow use of mbedtls_x509_crt_profile_next. (found by NWilson) diff --git a/library/ssl_srv.c b/library/ssl_srv.c index ca1e7b804..b48a609ee 100644 --- a/library/ssl_srv.c +++ b/library/ssl_srv.c @@ -299,7 +299,7 @@ static int ssl_parse_supported_point_formats( mbedtls_ssl_context *ssl, return( MBEDTLS_ERR_SSL_BAD_HS_CLIENT_HELLO ); } - p = buf + 2; + p = buf + 1; while( list_size > 0 ) { if( p[0] == MBEDTLS_ECP_PF_UNCOMPRESSED ||