QUIC WIRE: Refuse integer transport params with trailing body bytes

Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from #22523) (cherry picked from commit 05937a7)
openssl · Nov 2, 2023 · cecc05c · cecc05c
1 parent 3c7c486
commit cecc05c
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/ssl/quic/quic_wire.c b/ssl/quic/quic_wire.c
@@ -950,6 +950,9 @@ int ossl_quic_wire_decode_transport_param_int(PACKET *pkt,
     if (!PACKET_get_quic_vlint(&sub, value))
         return 0;
 
+    if (PACKET_remaining(&sub) > 0)
+        return 0;
+
    return 1;
 }