wolfSSL / wolfssl

The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS 1.3!
https://www.wolfssl.com
GNU General Public License v2.0
2.23k stars 799 forks source link

added check if the buf is at least RECORD_HEADER_SZ #7638

Closed gasbytes closed 3 weeks ago

gasbytes commented 4 weeks ago

Description

should fix this issue.

Testing

Forced it locally (no steps to reproduce were provided), and after some reading of the stacktrace I came up with this quick fix that doesn't require an extensive refactor. Tested like this:

./configure --enable-all --enable-aesni --enable-keylog-export --disable-ech CC="gcc -fsanitize=address"
make
sudo make install
./testsuite/testsuite.test

Checklist