commit c1b46d0242dc88da143842c16b99397c7add6dde
author Manuel Pégourié-Gonnard <mpg2@elzevir.fr> Wed Sep 16 11:18:32 2015 +0200
committer Manuel Pégourié-Gonnard <mpg2@elzevir.fr> Wed Sep 16 22:58:29 2015 +0200
tree d2d5afdf9a9ee8083b7950b3eedd072420a26e14
parent 60884a15973e644d25c3ebfafbd13f6e9f794e72

Fix bug in server parsing point formats extension

This bug becomes noticeable when the extension following the "supported point
formats" extension has a number starting with 0x01, which is the case of the
EC J-PAKE extension, which explains what I noticed the bug now.

This will be immediately backported to the stable branches,
see the corresponding commits for impact analysis.

library/ssl_srv.c

diff --git a/library/ssl_srv.c b/library/ssl_srv.c
index 67dad5f..aab25e2 100644
--- a/library/ssl_srv.c
+++ b/library/ssl_srv.c
@@ -299,7 +299,7 @@
         return( MBEDTLS_ERR_SSL_BAD_HS_CLIENT_HELLO );
     }
 
-    p = buf + 2;
+    p = buf + 1;
     while( list_size > 0 )
     {
         if( p[0] == MBEDTLS_ECP_PF_UNCOMPRESSED ||