Closed
Bug 1910079
Opened 2 months ago
Closed 2 months ago
NSS DTLS Client fuzzer sets invalid ssl version range
Categories
(NSS :: Test, defect, P3)
NSS
Test
Tracking
(Not tracked)
RESOLVED
FIXED
People
(Reporter: mdauer, Assigned: mdauer)
Details
Attachments
(1 file)
The follwing lines cause an assertion failure:
rv = SSL_VersionRangeSet(fd, &config->VersionRange());
assert(rv == SECSuccess);
The DTLS and TLS client fuzzer use the same min and max values for the SSL version range, however DTLS requires at least version 0x302
.
Assignee | ||
Comment 1•2 months ago
|
||
Updated•2 months ago
|
Group: crypto-core-security
Severity: -- → S4
Priority: -- → P3
Comment 2•2 months ago
|
||
Status: ASSIGNED → RESOLVED
Closed: 2 months ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•