mirrors-yuzu-emu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls synced 2024-11-25 07:29:02 +00:00
Code Issues Projects Releases Packages Wiki Activity

Add replay detection in parse_client_hello()

Browse source
This commit is contained in:
Manuel Pégourié-Gonnard 2014-09-24 14:54:06 +02:00 committed by Paul Bakker
parent 2739313cea
commit f03c7aa469
1 changed files with 16 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
library/ssl_srv.c
View file

@ -1164,6 +1164,9 @@ static int ssl_parse_client_hello( ssl_context *ssl )
SSL_DEBUG_MSG( 2, ( "=> parse client hello" ) ); SSL_DEBUG_MSG( 2, ( "=> parse client hello" ) );
#if defined(POLARSSL_SSL_DTLS_ANTI_REPLAY)
read_record_header:
#endif
/* /*
* If renegotiating, then the input was read with ssl_read_record(), * If renegotiating, then the input was read with ssl_read_record(),
* otherwise read it ourselves manually in order to support SSLv2 * otherwise read it ourselves manually in order to support SSLv2
@ -1235,6 +1238,19 @@ static int ssl_parse_client_hello( ssl_context *ssl )
} }
memcpy( ssl->out_ctr + 2, ssl->in_ctr + 2, 6 ); memcpy( ssl->out_ctr + 2, ssl->in_ctr + 2, 6 );
#if defined(POLARSSL_SSL_DTLS_ANTI_REPLAY)
if( ssl_dtls_replay_check( ssl ) != 0 )
{
SSL_DEBUG_MSG( 1, ( "replayed record, discarding" ) );
ssl->next_record_offset = 0;
ssl->in_left = 0;
goto read_record_header;
}
/* No MAC to check yet, so we can update right now */
ssl_dtls_replay_update( ssl );
#endif
} }
#endif /* POLARSSL_SSL_PROTO_DTLS */ #endif /* POLARSSL_SSL_PROTO_DTLS */