commit 89f77623b8539a84fb18dc92f739b5bb791d7cb0
author Simon Butcher <simon.butcher@arm.com> Sun Sep 27 22:50:49 2015 +0100
committer Simon Butcher <simon.butcher@arm.com> Sun Sep 27 22:50:49 2015 +0100
tree 48960f0f8253b7692358e2ab688294a4eef28b9d
parent f592e8eaf6f970489c57e02ac35c3f6721c51413

Added max length checking of hostname

library/ssl_tls.c

diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index d9b05fd..23165a4 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -5833,6 +5833,9 @@
     if( hostname_len + 1 == 0 )
         return( MBEDTLS_ERR_SSL_BAD_INPUT_DATA );
 
+    if( hostname_len > MBEDTLS_SSL_MAX_HOST_NAME )
+        return( MBEDTLS_ERR_SSL_BAD_INPUT_DATA );
+
     ssl->hostname = mbedtls_calloc( 1, hostname_len + 1 );
 
     if( ssl->hostname == NULL )