| commit | c8269881093324b881b81472be037055571f73f3 | [log] [tgz] |
|---|---|---|
| author | Matt Caswell <matt@openssl.org> | Mon Apr 27 11:07:06 2015 +0100 |
| committer | Matt Caswell <matt@openssl.org> | Thu Apr 30 23:12:39 2015 +0100 |
| tree | c427132f22ce43de444522428b0c1fe6c193402d | |
| parent | 873fb39f20b6763daba226b74e83fb194924c7bf [diff] |
Sanity check EVP_CTRL_AEAD_TLS_AAD The various implementations of EVP_CTRL_AEAD_TLS_AAD expect a buffer of at least 13 bytes long. Add sanity checks to ensure that the length is at least that. Also add a new constant (EVP_AEAD_TLS1_AAD_LEN) to evp.h to represent this length. Thanks to Kevin Wojtysiak (Int3 Solutions) and Paramjot Oberoi (Int3 Solutions) for reporting this issue. Reviewed-by: Andy Polyakov <appro@openssl.org>