Re: [TLS] ALPN concerns

[John Mattsson <[e-mail]>]

Isn't the most probable explanation that they use an unsigned 8-bit int to store the length of the ClientHello message?

Then they might check that the length actually fits (as your example code), get some overflow exception, or just succeeding in discarding the most significant bits in the length.

/John


-----Original Message-----
From: [e-mail] [mailto:[e-mail]] On Behalf Of Peter Gutmann
Sent: den 6 november 2013 07:53
To: <[e-mail]>
Subject: Re: [TLS] ALPN concerns

Brian Smith <[e-mail]> writes:

>I am very concerned about the issues that they've run into where many 
>web servers are failing to handshake when the ClientHello message is 
>larger than
>255 bytes.

I'm curious as to how something like this could come about, is anyone familiar with the code base for something that does this?  Is there actually code out there that explicitly checks:

  if( sizeof( client_handshake ) > 255 )
    return( -1 );

and if so, why?

Peter.
_______________________________________________
TLS mailing list
[e-mail]
https://www.ietf.org/mailman/listinfo/tls