mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-10-31 11:26:43 +08:00
f958c05fa7
The TLS 1.3 server accepted an empty named_group_list, and data trailing the list, in a ClientHello supported_groups extension and continued the handshake. RFC 8446 section 4.2.7 defines the list as NamedGroup<2..2^16-1>, so it must hold at least one group and be the whole content of the extension. Reject an empty list and trailing data in ssl_tls13_parse_supported_groups_ext() with a decode_error alert, which is what OpenSSL does. Expose the parser with MBEDTLS_STATIC_TESTABLE and add unit tests. Fixes #10897. Fixes #10733. Signed-off-by: Joachim Bauernberger <joachim.bauernberger@protonmail.com> |
||
|---|---|---|
| .. | ||
| 00README.md | ||
| cert-write-der-windows.txt | ||
| cmake-config.txt | ||
| fix-ENABLE_PROGRAMS-bug.txt | ||
| numeric-oid-overflow.txt | ||
| serialized-data-load-hardening.txt | ||
| ssl-context-load-alpn-bounds.txt | ||
| tls12-handshake-length-read-bounds.txt | ||
| tls13-key-share-validation.txt | ||
| tls13-supported-groups-validation.txt | ||
| x509-basic-constraints-integer-first.txt | ||
| x509-empty-authority-key-id.txt | ||