Closed Bug 1910079 Opened 2 months ago Closed 2 months ago

NSS DTLS Client fuzzer sets invalid ssl version range

Categories

(NSS :: Test, defect, P3)

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: mdauer, Assigned: mdauer)

Details

Attachments

(1 file)

The follwing lines cause an assertion failure:

    rv = SSL_VersionRangeSet(fd, &config->VersionRange());
    assert(rv == SECSuccess);

The DTLS and TLS client fuzzer use the same min and max values for the SSL version range, however DTLS requires at least version 0x302.

Group: crypto-core-security
Severity: -- → S4
Priority: -- → P3
Status: ASSIGNED → RESOLVED
Closed: 2 months ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: