Merge pull request #7683 from SparkiDev/def_ticket_cb_inlen

SSL default ticket encryption callback: check in len on decrypt
wolfSSL · Jun 28, 2024 · 80d4f71 · 80d4f71
2 parents 4913289 + 6d0dc7f
commit 80d4f71
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/internal.c b/src/internal.c
@@ -38846,6 +38846,10 @@ static int DefTicketEncCb(WOLFSSL* ssl, byte key_name[WOLFSSL_TICKET_NAME_SZ],
 
  WOLFSSL_ENTER("DefTicketEncCb");
 
+ if ((!enc) && (inLen != sizeof(InternalTicket))) {
+ return BUFFER_E;
+ }
+
  /* Check we have setup the RNG, name and primary key. */
  if (keyCtx->expirary[0] == 0) {
 #ifndef SINGLE_THREADED