提交 4f605ccb 编写于 作者: D Dr. Stephen Henson

Clear existing extension state.

When parsing ClientHello clear any existing extension state from
SRP login and SRTP profile.

Thanks to Karthikeyan Bhargavan for reporting this issue.
Reviewed-by: NMatt Caswell <matt@openssl.org>
上级 2a9338ee
......@@ -1996,6 +1996,16 @@ static int ssl_scan_clienthello_tlsext(SSL *s, unsigned char **p, unsigned char
s->s3->flags &= ~TLS1_FLAGS_ENCRYPT_THEN_MAC;
#endif
#ifndef OPENSSL_NO_SRP
if (s->srp_ctx.login != NULL)
{
OPENSSL_free(s->srp_ctx.login);
s->srp_ctx.login = NULL;
}
#endif
s->srtp_profile = NULL;
if (data >= (d+n-2))
goto ri_check;
n2s(data,len);
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册