diff options
| author | Filippo Valsorda <filippo@golang.org> | 2025-05-21 22:41:54 +0200 |
|---|---|---|
| committer | Gopher Robot <gobot@golang.org> | 2025-05-23 17:06:24 -0700 |
| commit | aca9f4e484b529aeb15bf6f9633a5f07d9bab940 (patch) | |
| tree | 87e0b9a50b11cce8e3dd4eaacf1b2939105ae900 /src | |
| parent | 8cb0941a85de6ddbd6f49f8e7dc2dd3caeeee61c (diff) | |
| download | go-aca9f4e484b529aeb15bf6f9633a5f07d9bab940.tar.xz | |
crypto/tls: signature_algorithms in CertificateRequest can't be empty
Change-Id: I6a6a4656ab97e1f247df35b2589cd73461b4ac76
Reviewed-on: https://go-review.googlesource.com/c/go/+/675917
Auto-Submit: Filippo Valsorda <filippo@golang.org>
Reviewed-by: David Chase <drchase@google.com>
Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>
Reviewed-by: Daniel McCarney <daniel@binaryparadox.net>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Diffstat (limited to 'src')
| -rw-r--r-- | src/crypto/tls/handshake_messages.go | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/crypto/tls/handshake_messages.go b/src/crypto/tls/handshake_messages.go index ad3e5fa352..d9a475aab1 100644 --- a/src/crypto/tls/handshake_messages.go +++ b/src/crypto/tls/handshake_messages.go @@ -1790,7 +1790,7 @@ func (m *certificateRequestMsg) unmarshal(data []byte) bool { } sigAndHashLen := uint16(data[0])<<8 | uint16(data[1]) data = data[2:] - if sigAndHashLen&1 != 0 { + if sigAndHashLen&1 != 0 || sigAndHashLen == 0 { return false } if len(data) < int(sigAndHashLen) { |