From a35956b2f7749a8c7a199bdb416a02912d6e33e3 Mon Sep 17 00:00:00 2001 From: Hugo Landau Date: Mon, 6 Nov 2023 08:43:03 +0000 Subject: QUIC LCIDM: Enforce and document ODCID peculiarities Reviewed-by: Neil Horman Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/22673) --- ssl/quic/quic_lcidm.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'ssl') diff --git a/ssl/quic/quic_lcidm.c b/ssl/quic/quic_lcidm.c index 5c956e4edd..af61292e57 100644 --- a/ssl/quic/quic_lcidm.c +++ b/ssl/quic/quic_lcidm.c @@ -318,7 +318,8 @@ int ossl_quic_lcidm_enrol_odcid(QUIC_LCIDM *lcidm, QUIC_LCIDM_CONN *conn; QUIC_LCID key, *lcid_obj; - if (initial_odcid == NULL) + if (initial_odcid == NULL || initial_odcid->id_len < QUIC_MIN_ODCID_LEN + || initial_odcid->id_len > QUIC_MAX_CONN_ID_LEN) return 0; if ((conn = lcidm_upsert_conn(lcidm, opaque)) == NULL) -- cgit v1.2.3