[gnutls-devel] GnuTLS | Forbid uncolicited CompressedCertificate messages (!1678)

[Read-only notification of GnuTLS library development activities]

Alexander Sosedkin commented on a discussion on lib/tls13/certificate.c: https://gitlab.com/gnutls/gnutls/-/merge_requests/1678#note_1201675087

>  		return gnutls_assert_val(ret);
>  	comp_method = _gnutls_compress_certificate_num2method(method_num);
>  
> +	if (!_gnutls_compress_certificate_is_method_enabled(session, comp_method))
> +		return gnutls_assert_val(GNUTLS_E_ILLEGAL_PARAMETER);

e2443b0a96, uncompressed_length mismatch, I get decompression_failure now.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/1678#note_1201675087
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20221208/6641ab83/attachment.html>