commit 77e257e95845bbce217b58fff0c8283f06d6b20c
author Paul Bakker <p.j.bakker@polarssl.org> Mon Dec 16 15:29:52 2013 +0100
committer Paul Bakker <p.j.bakker@polarssl.org> Tue Dec 17 13:09:12 2013 +0100
tree fa5545bfc086436857e37f1ae9d8176150b8b23b
parent 6c21276342203f06073fd70493433b5d90f14a6a

Fixed bad check for maximum size of fragment length index

library/ssl_tls.c

diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index c2f5603..e9299d2 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -3824,7 +3824,7 @@
 #if defined(POLARSSL_SSL_MAX_FRAGMENT_LENGTH)
 int ssl_set_max_frag_len( ssl_context *ssl, unsigned char mfl_code )
 {
-    if( mfl_code >= sizeof( mfl_code_to_length ) ||
+    if( mfl_code >= SSL_MAX_FRAG_LEN_INVALID ||
         mfl_code_to_length[mfl_code] > SSL_MAX_CONTENT_LEN )
     {
         return( POLARSSL_ERR_SSL_BAD_INPUT_DATA );