Details
-
Bug
-
Resolution: Fixed
-
Major
-
None
-
May 2016
Description
We somehow get a received > data_size situation, so we overrun the data buffer.
The reason is that schan_imp_recv's check for ROS_SCHAN_IS_BLOCKING is broken – it also triggers for error codes such as MBEDTLS_ERR_SSL_WANT_READ or MBEDTLS_ERR_SSL_WANT_WRITE.
Looking at the function, the MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY also seems broken – it should probably return a length of 0.
Attachments
Issue Links
- relates to
-
CORE-10658 PATCH [RAPPS] database - uTorrent broken
- Resolved