commit fd35af157926ab3d038818929dc9979cdcc48dc2
author Manuel Pégourié-Gonnard <mpg@elzevir.fr> Mon Jun 23 14:10:13 2014 +0200
committer Paul Bakker <p.j.bakker@polarssl.org> Wed Jun 25 11:26:14 2014 +0200
tree 8895d9514932b00a2a3971d2c8b7d2c8026c00af
parent 87a8ffeaba06c1f4bebfdc0680f7285907853314

Fix off-by-one error in point format parsing

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index 2651b0c..f22a146 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -49,6 +49,8 @@
    * Fix preprocessor checks for bn_mul PPC asm (found by Barry K. Nathan).
    * Use \n\t rather than semicolons for bn_mul asm, since some assemblers
      interpret semicolons as comment delimiters (found by Barry K. Nathan).
+   * Fix off-by-one error in parsing Supported Point Format extension that
+     caused some handshakes to fail.
 
 = PolarSSL 1.3.7 released on 2014-05-02
 Features

library/ssl_cli.c

diff --git a/library/ssl_cli.c b/library/ssl_cli.c
index fda9ebf..608140f 100644
--- a/library/ssl_cli.c
+++ b/library/ssl_cli.c
@@ -801,7 +801,7 @@
         return( POLARSSL_ERR_SSL_BAD_HS_SERVER_HELLO );
     }
 
-    p = buf + 2;
+    p = buf + 1;
     while( list_size > 0 )
     {
         if( p[0] == POLARSSL_ECP_PF_UNCOMPRESSED ||