dany/luasec
1
0
Fork 0
mirror of https://github.com/brunoos/luasec.git synced 2024-07-05 20:59:47 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix checklstring, pop(3), identity_len

Browse Source
This commit is contained in:
Bruno Silvestre 2023-02-16 11:27:52 -03:00
parent 50431ed511
commit 38bb3edfb4
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
src/context.c
View File

@ -733,7 +733,7 @@ static unsigned int server_psk_cb(SSL *ssl, const char *identity, unsigned char
return 0;
}
ret_psk = luaL_tolstring(L, -1, &psk_len);
ret_psk = luaL_checklstring(L, -1, &psk_len);
if (psk_len == 0 || psk_len > max_psk_len)
psk_len = 0;
@ -793,14 +793,14 @@ static unsigned int client_psk_cb(SSL *ssl, const char *hint, char *identity, un
lua_call(L, 3, 2);
if (!lua_isstring(L, -1) || !lua_isstring(L, -2)) {
lua_pop(L, 2);
lua_pop(L, 3);
return 0;
}
ret_identity = luaL_tolstring(L, -2, &identity_len);
ret_psk = luaL_tolstring(L, -1, &psk_len);
ret_identity = luaL_checklstring(L, -2, &identity_len);
ret_psk = luaL_checklstring(L, -1, &psk_len);
if (ret_identity >= max_identity_len || psk_len > max_psk_len)
if (identity_len >= max_identity_len || psk_len > max_psk_len)
psk_len = 0;
else {
memcpy(identity, ret_identity, identity_len);