Skip to content

Commit 7001329

Browse files
committed
DoIgnore Missing Payload Bounds Validation
The DoIgnore() function was not bounds checking the ignore message. Changed it to use the GetSkip() function which does bounds checking and skips the current blob. Affected function: DoIgnore. Issue: F-410
1 parent 06c13cd commit 7001329

File tree

1 file changed

+1
-11
lines changed

1 file changed

+1
-11
lines changed

src/internal.c

Lines changed: 1 addition & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -6320,18 +6320,8 @@ static int DoKexDhGexGroup(WOLFSSH* ssh,
63206320

63216321
static int DoIgnore(WOLFSSH* ssh, byte* buf, word32 len, word32* idx)
63226322
{
6323-
word32 dataSz;
6324-
word32 begin = *idx;
6325-
63266323
WOLFSSH_UNUSED(ssh);
6327-
WOLFSSH_UNUSED(len);
6328-
6329-
ato32(buf + begin, &dataSz);
6330-
begin += LENGTH_SZ + dataSz;
6331-
6332-
*idx = begin;
6333-
6334-
return WS_SUCCESS;
6324+
return GetSkip(buf, len, idx);
63356325
}
63366326

63376327
static int DoRequestSuccess(WOLFSSH *ssh, byte *buf, word32 len, word32 *idx)

0 commit comments

Comments
 (0)