nghttpx: Drop connection if client TLS handshake packet is too large

47331126 · Tatsuhiro Tsujikawa · 0c4cbc80 · 47331126
Commit 47331126 authored Aug 13, 2015 by Tatsuhiro Tsujikawa
Hide whitespace changes
Inline Side-by-side

Showing with 7 additions and 0 deletions

src/shrpx_connection.cc src/shrpx_connection.cc +7 -0

No files found.
--- a/src/shrpx_connection.cc
+++ b/src/shrpx_connection.cc
@@ -341,6 +341,13 @@ int Connection::tls_handshake() {
    auto err = SSL_get_error(tls.ssl, rv);
    switch (err) {
    case SSL_ERROR_WANT_READ:
+      if (read_buffer_full(tls.rbuf)) {
+        if (LOG_ENABLED(INFO)) {
+          LOG(INFO) << "tls: handshake message is too large";
+        }
+        return -1;
+      }
+      break;
    case SSL_ERROR_WANT_WRITE:
      break;
    default: