commit adbd9449ecad5ff011a3eb57cd2548900d421603
author Johan Pascal <johan.pascal@belledonne-communications.com> Mon Oct 26 21:24:25 2020 +0100
committer Johan Pascal <johan.pascal@belledonne-communications.com> Thu Oct 29 01:14:50 2020 +0100
tree f239419868f9d2f8f62db61175942a35bb88f355
parent 76fdf1d60e93a4acb2653ec91e23180c02e142d3

More minor fix

Signed-off-by: Johan Pascal <johan.pascal@belledonne-communications.com>

library/ssl_cli.c

diff --git a/library/ssl_cli.c b/library/ssl_cli.c
index 234098a..ddbe5ca 100644
--- a/library/ssl_cli.c
+++ b/library/ssl_cli.c
@@ -1878,7 +1878,7 @@
      *                                      + mki_len(1 byte)
      *                                      and optional srtp_mki
      */
-    if( len != ( buf[4] + 5u ) )
+    if( ( len < 5 ) || ( len != ( buf[4] + 5u ) ) )
         return( MBEDTLS_ERR_SSL_BAD_HS_SERVER_HELLO );
 
     /*
@@ -2524,8 +2524,11 @@
         case MBEDTLS_TLS_EXT_USE_SRTP:
             MBEDTLS_SSL_DEBUG_MSG( 3, ( "found use_srtp extension" ) );
 
-            if( ( ret = ssl_parse_use_srtp_ext( ssl, ext + 4, ext_size ) ) != 0 )
-                return( ret );
+            if ( ssl->conf->transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM )
+            {
+                if( ( ret = ssl_parse_use_srtp_ext( ssl, ext + 4, ext_size ) ) != 0 )
+                    return( ret );
+            }
 
             break;
 #endif /* MBEDTLS_SSL_DTLS_SRTP */