Attention needed from Daniel McCarney and Roland Shoemaker
Filippo Valsorda has uploaded the change for review![Open in Gerrit]()
Filippo Valsorda would like Daniel McCarney and Roland Shoemaker to review this change.
Commit message
crypto/tls: signature_algorithms in CertificateRequest can't be empty
Change-Id: I6a6a4656ab97e1f247df35b2589cd73461b4ac76
Change diff
diff --git a/src/crypto/tls/handshake_messages.go b/src/crypto/tls/handshake_messages.go
index ad3e5fa..d9a475a 100644
--- a/src/crypto/tls/handshake_messages.go
+++ b/src/crypto/tls/handshake_messages.go
@@ -1790,7 +1790,7 @@
}
sigAndHashLen := uint16(data[0])<<8 | uint16(data[1])
data = data[2:]
- if sigAndHashLen&1 != 0 {
+ if sigAndHashLen&1 != 0 || sigAndHashLen == 0 {
return false
}
if len(data) < int(sigAndHashLen) {
Change information
Files:
- M src/crypto/tls/handshake_messages.go
Change size: XS
Delta: 1 file changed, 1 insertion(+), 1 deletion(-)
Open in GerritRelated details
Attention is currently required from:
- Daniel McCarney
- Roland Shoemaker
Gerrit-MessageType: newchange
Gerrit-Project: go
Gerrit-Branch: master
Gerrit-Change-Id: I6a6a4656ab97e1f247df35b2589cd73461b4ac76
Gerrit-Change-Number: 675917
Gerrit-PatchSet: 1