DGNum/hostapd
6
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

TLS: Fix AlertDescription for missing partial processing case

Browse source 
tlsv1_record_receive() did not return error here and as such, &alert was
not set and must not be used. Report internal error instead to avoid use
of uninitialized memory.

Signed-off-by: Jouni Malinen <j@w1.fi>
This commit is contained in:
Jouni Malinen 2019-02-10 01:08:07 +02:00
parent 1ac9c020b5
commit fbc2123a14
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
src/tls/tlsv1_server.c
View file

@ -164,7 +164,8 @@ u8 * tlsv1_server_handshake(struct tlsv1_server *conn,
/* need more data */ /* need more data */
wpa_printf(MSG_DEBUG, "TLSv1: Partial processing not " wpa_printf(MSG_DEBUG, "TLSv1: Partial processing not "
"yet supported"); "yet supported");
tlsv1_server_alert(conn, TLS_ALERT_LEVEL_FATAL, alert); tlsv1_server_alert(conn, TLS_ALERT_LEVEL_FATAL,
TLS_ALERT_INTERNAL_ERROR);
goto failed; goto failed;
} }
ct = pos[0]; ct = pos[0];