mirror of
https://github.com/openssl/openssl.git
synced 2026-01-25 02:56:43 +00:00
ssl/statem/extensions_clnt.c: Use proper TLS alert for semantic errs
Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <paul.dale@oracle.com> Reviewed-by: Frederik Wedel-Heinen <fwh.openssl@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> MergeDate: Wed Jan 21 16:46:28 2026 (Merged from https://github.com/openssl/openssl/pull/29469)
This commit is contained in:
committed by
Tomas Mraz
parent
adb7560f39
commit
ccc132989e
@@ -1788,7 +1788,7 @@ int tls_parse_stoc_use_srtp(SSL_CONNECTION *s, PACKET *pkt,
|
||||
/* Throw an error if the server gave us an unsolicited extension */
|
||||
clnt = SSL_get_srtp_profiles(SSL_CONNECTION_GET_SSL(s));
|
||||
if (clnt == NULL) {
|
||||
SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_R_NO_SRTP_PROFILES);
|
||||
SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_R_NO_SRTP_PROFILES);
|
||||
return 0;
|
||||
}
|
||||
|
||||
@@ -1805,7 +1805,7 @@ int tls_parse_stoc_use_srtp(SSL_CONNECTION *s, PACKET *pkt,
|
||||
}
|
||||
}
|
||||
|
||||
SSLfatal(s, SSL_AD_DECODE_ERROR,
|
||||
SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
|
||||
SSL_R_BAD_SRTP_PROTECTION_PROFILE_LIST);
|
||||
return 0;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user