ssl/statem/extensions_clnt.c: Use proper TLS alert for semantic errs

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Frederik Wedel-Heinen <fwh.openssl@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
MergeDate: Wed Jan 21 16:46:28 2026
(Merged from https://github.com/openssl/openssl/pull/29469)
This commit is contained in:
Timothy Copeland
2025-12-20 17:24:56 +11:00
committed by Tomas Mraz
parent adb7560f39
commit ccc132989e

View File

@@ -1788,7 +1788,7 @@ int tls_parse_stoc_use_srtp(SSL_CONNECTION *s, PACKET *pkt,
/* Throw an error if the server gave us an unsolicited extension */
clnt = SSL_get_srtp_profiles(SSL_CONNECTION_GET_SSL(s));
if (clnt == NULL) {
SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_R_NO_SRTP_PROFILES);
SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_R_NO_SRTP_PROFILES);
return 0;
}
@@ -1805,7 +1805,7 @@ int tls_parse_stoc_use_srtp(SSL_CONNECTION *s, PACKET *pkt,
}
}
SSLfatal(s, SSL_AD_DECODE_ERROR,
SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
SSL_R_BAD_SRTP_PROTECTION_PROFILE_LIST);
return 0;
}