commit 4f42c11846bcd8783d2a07ad30ce979eb23add22
author Paul Bakker <p.j.bakker@polarssl.org> Thu Apr 17 14:48:23 2014 +0200
committer Paul Bakker <p.j.bakker@polarssl.org> Thu Apr 17 15:37:39 2014 +0200
tree 77428191333ec764061d924b8f48dd14a09b058b
parent d893aef867745321e3f7cc12c73c0d0c95d48901

Remove arbitrary maximum length for cipher_list and content length

library/ssl_srv.c

diff --git a/library/ssl_srv.c b/library/ssl_srv.c
index d99f105..c384364 100644
--- a/library/ssl_srv.c
+++ b/library/ssl_srv.c
@@ -1172,7 +1172,7 @@
 
     n = ( buf[3] << 8 ) | buf[4];
 
-    if( n < 45 || n > 2048 )
+    if( n < 45 || n > SSL_MAX_CONTENT_LEN )
     {
         SSL_DEBUG_MSG( 1, ( "bad client hello message" ) );
         return( POLARSSL_ERR_SSL_BAD_HS_CLIENT_HELLO );
@@ -1287,7 +1287,7 @@
     ciph_len = ( buf[39 + sess_len] << 8 )
              | ( buf[40 + sess_len]      );
 
-    if( ciph_len < 2 || ciph_len > 256 || ( ciph_len % 2 ) != 0 )
+    if( ciph_len < 2 || ( ciph_len % 2 ) != 0 )
     {
         SSL_DEBUG_MSG( 1, ( "bad client hello message" ) );
         return( POLARSSL_ERR_SSL_BAD_HS_CLIENT_HELLO );