diff options
| author | David Benjamin <davidben@chromium.org> | 2014-07-05 08:23:20 +0400 |
|---|---|---|
| committer | Adam Langley <agl@google.com> | 2014-07-09 02:17:59 +0400 |
| commit | 35a7a4492ddc6082e1b0e71252f35701f8aa848a (patch) | |
| tree | 52234c29c813b224068d25eec9007209b277b36d /ssl/ssl_error.c | |
| parent | 398ba895fba66c3f191add14299b3da2def64af4 (diff) | |
Check duplicate extensions before processing.
ClientHello and ServerHello are not allowed to include duplicate extensions.
Add a new helper function to check this and call as appropriate. Remove ad-hoc
per-extension duplicate checks which are no unnecessary.
Add runner.go tests to verify such message correctly rejected.
Change-Id: I7babd5b642dfec941459512869e2dd6de26a831c
Reviewed-on: https://boringssl-review.googlesource.com/1100
Reviewed-by: Adam Langley <agl@google.com>
Diffstat (limited to 'ssl/ssl_error.c')
| -rw-r--r-- | ssl/ssl_error.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/ssl/ssl_error.c b/ssl/ssl_error.c index ac61bcfc..eaac152a 100644 --- a/ssl/ssl_error.c +++ b/ssl/ssl_error.c @@ -191,6 +191,7 @@ const ERR_STRING_DATA SSL_error_string_data[] = { {ERR_PACK(ERR_LIB_SSL, SSL_F_tls1_change_cipher_state, 0), "tls1_change_cipher_state"}, {ERR_PACK(ERR_LIB_SSL, SSL_F_tls1_change_cipher_state_aead, 0), "tls1_change_cipher_state_aead"}, {ERR_PACK(ERR_LIB_SSL, SSL_F_tls1_change_cipher_state_cipher, 0), "tls1_change_cipher_state_cipher"}, + {ERR_PACK(ERR_LIB_SSL, SSL_F_tls1_check_duplicate_extensions, 0), "tls1_check_duplicate_extensions"}, {ERR_PACK(ERR_LIB_SSL, SSL_F_tls1_export_keying_material, 0), "tls1_export_keying_material"}, {ERR_PACK(ERR_LIB_SSL, SSL_F_tls1_get_server_supplemental_data, 0), "tls1_get_server_supplemental_data"}, {ERR_PACK(ERR_LIB_SSL, SSL_F_tls1_heartbeat, 0), "tls1_heartbeat"}, |