Closed Bug 1858241 Opened 2 years ago Closed 2 years ago

ssl3_AppendHandshakeNumber should enforce that num fits in lenSize

Categories

(NSS :: Libraries, defect)

defect

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: keeler, Assigned: anna.weine)

Details

Attachments

(2 files)

ssl3_AppendHandshakeNumber takes a num and encodes it in network byte order using lenSize bytes. However, it doesn't check that num fits in lenSize bytes, and it absolutely should.

Attachment #9357789 - Attachment description: WIP: Bug 1858241 - Introducing input check of ssl3_AppendHandshakeNumber → Bug 1858241 - Introducing input check of ssl3_AppendHandshakeNumber
Attachment #9357789 - Attachment description: Bug 1858241 - Introducing input check of ssl3_AppendHandshakeNumber → WIP: Bug 1858241 - Introducing input check of ssl3_AppendHandshakeNumber
Attachment #9357789 - Attachment description: WIP: Bug 1858241 - Introducing input check of ssl3_AppendHandshakeNumber → Bug 1858241 - Introducing input check of ssl3_AppendHandshakeNumber
Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Assignee: nobody → nkulatova
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: