Ensure we have length checks for all extensions
authorMatt Caswell <matt@openssl.org>
Fri, 14 Oct 2016 12:07:00 +0000 (13:07 +0100)
committerMatt Caswell <matt@openssl.org>
Fri, 28 Oct 2016 08:40:55 +0000 (09:40 +0100)
commit3ab5f981ed17adf0b804909d9aeac7419a432f01
tree9c9d80858e89eea4a60415b1c41166419bcb245f
parent8c9365a690e2d5f0c49f3d9a3d41973ed9dcedcc
Ensure we have length checks for all extensions

The previous commit inspired a review of all the length checks for the
extension adding code. This adds more robust checks and adds checks where
some were missing previously. The real solution for this is to use WPACKET
which is currently in master - but that cannot be applied to release
branches.

Reviewed-by: Rich Salz <rsalz@openssl.org>
ssl/t1_lib.c