commit 5d53cbef3ad2f32b98013402edaf44daf0f1c036
author Manuel Pégourié-Gonnard <mpg@elzevir.fr> Mon Jul 14 13:51:41 2014 +0200
committer Paul Bakker <p.j.bakker@polarssl.org> Tue Oct 21 16:30:13 2014 +0200
tree d796e6a0eaac791d0a42287ddb8e4e4f9a6a103b
parent 879a4f9623038b5934bf560e711eddca9eac96e2

Fix length check in ssl_write_ticket()

library/ssl_srv.c

diff --git a/library/ssl_srv.c b/library/ssl_srv.c
index d0ef6ef..c6bcf25 100644
--- a/library/ssl_srv.c
+++ b/library/ssl_srv.c
@@ -212,7 +212,7 @@
      */
     state = p + 2;
     if( ssl_save_session( ssl->session_negotiate, state,
-                          SSL_MAX_CONTENT_LEN - ( state - ssl->out_ctr ) - 48,
+                          SSL_MAX_CONTENT_LEN - ( state - ssl->out_msg ) - 48,
                           &clear_len ) != 0 )
     {
         return( POLARSSL_ERR_SSL_CERTIFICATE_TOO_LARGE );