kris/th5
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

crypto/tls: disallow handshake messages fragmented across CCS

Browse Source 
BoGo: FragmentAcrossChangeCipherSpec-Server-Packed
This commit is contained in:
Filippo Valsorda 2017-01-18 16:53:35 +00:00 committed by Peter Wu
parent 4191962f25
commit de613b152d
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
conn.go
View File

@ -776,6 +776,11 @@ func (c *Conn) readRecord(want recordType) error {
c.in.setErrorLocked(c.sendAlert(alertUnexpectedMessage)) c.in.setErrorLocked(c.sendAlert(alertUnexpectedMessage))
break break
} }
// Handshake messages are not allowed to fragment across the CCS
if c.hand.Len() > 0 {
c.in.setErrorLocked(c.sendAlert(alertUnexpectedMessage))
break
}
err := c.in.changeCipherSpec() err := c.in.changeCipherSpec()
if err != nil { if err != nil {
c.in.setErrorLocked(c.sendAlert(err.(alert))) c.in.setErrorLocked(c.sendAlert(err.(alert)))