Glenn Strauss b3e4aae7bb TLS: Fix unsigned int underflow in internal TLS 1.0/1.1 implementation ...

Taking sizeof(ptr) is incorrect to determine size of passed in hash and
results in hlen getting set to a very large value since MD5_MAC_LEN >
sizeof(ptr). Provide the actual size of the hash buffer from the caller
to fix this.

tls_key_x_server_params_hash() callers src/tls/tlsv1_client_read.c and
src/tls/tlsv1_server_write.c both pass in a large enough hash (hash[64]
or hash[100]) that this does not appear to have an impact, though it is
still wrong.

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>

2024-03-20 09:33:52 +05:30

..

asn1.c

…

asn1.h

…

bignum.c

…

bignum.h

…

libtommath.h

…

pkcs1.c

…

pkcs1.h

…

pkcs5.c

…

pkcs5.h

…

pkcs8.c

…

pkcs8.h

…

rsa.c

…

rsa.h

…

tlsv1_client_i.h

…

tlsv1_client_ocsp.c

…

tlsv1_client_read.c

…

tlsv1_client_write.c

…

tlsv1_client.c

…

tlsv1_client.h

…

tlsv1_common.c

…

tlsv1_common.h

…

tlsv1_cred.c

…

tlsv1_cred.h

…

tlsv1_record.c

…

tlsv1_record.h

…

tlsv1_server_i.h

…

tlsv1_server_read.c

…

tlsv1_server_write.c

…

tlsv1_server.c

…

tlsv1_server.h

…

x509v3.c

…

x509v3.h

…