Prevent arithmetic overflow on bounds check

This commit is contained in:
Krzysztof Stachowiak 2018-03-14 11:21:35 +01:00
parent 9e1839bc43
commit 8e0b1166b6

View file

@ -2066,7 +2066,7 @@ static int ssl_parse_server_psk_hint( mbedtls_ssl_context *ssl,
len = (*p)[0] << 8 | (*p)[1];
*p += 2;
if( (*p) + len > end )
if( (*p) > end - len )
{
MBEDTLS_SSL_DEBUG_MSG( 1, ( "bad server key exchange message "
"(psk_identity_hint length)" ) );