Re: [Openvpn-devel] [PATCH] tls-crypt-v2: bail out if the client key is too small

2022-06-28 Thread Arne Schwabe
Am 28.06.22 um 11:41 schrieb Antonio Quartulli: The tls-crypt-v2 key should be at least 2 bytes long in order to read the actual length. Bail out if the key is too short. Failing to do so will lead to a read out of the buffer boundary. Actually not. We read from BEND(), so this is defined for

[Openvpn-devel] [PATCH] tls-crypt-v2: bail out if the client key is too small

2022-06-28 Thread Antonio Quartulli
The tls-crypt-v2 key should be at least 2 bytes long in order to read the actual length. Bail out if the key is too short. Failing to do so will lead to a read out of the buffer boundary. While at it improve the error message a bit. Signed-off-by: Antonio Quartulli --- src/openvpn/tls_crypt.c