From 34ced2dffe5def24e5b6ecb4167fe186371f4814 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Manuel=20P=C3=A9gouri=C3=A9-Gonnard?= Date: Fri, 20 Sep 2013 11:37:39 +0200 Subject: [PATCH] Fix mis-sized buffer Reported by rgacogne on twitter. Also spotted by gcc-4.8 with -O2 --- library/ssl_srv.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/library/ssl_srv.c b/library/ssl_srv.c index 115bf0ad7..dd31a6414 100644 --- a/library/ssl_srv.c +++ b/library/ssl_srv.c @@ -254,7 +254,7 @@ static int ssl_parse_ticket( ssl_context *ssl, unsigned char *enc_len_p = iv + 16; unsigned char *ticket = enc_len_p + 2; unsigned char *mac; - unsigned char computed_mac[16]; + unsigned char computed_mac[32]; size_t enc_len, clear_len, i; unsigned char pad_len;