1
0
mirror of https://github.com/openbsd/src.git synced 2026-06-18 07:13:36 +02:00

ssl_kex: ensure decode_error alert is raised

This commit is contained in:
tb
2026-06-09 05:17:24 +00:00
parent 0911d52936
commit 7b8bc4ba51
+13 -1
View File
@@ -1,4 +1,4 @@
/* $OpenBSD: ssl_kex.c,v 1.2 2026/06/08 11:41:21 tb Exp $ */
/* $OpenBSD: ssl_kex.c,v 1.3 2026/06/09 05:17:24 tb Exp $ */
/*
* Copyright (c) 2026 Theo Buehler <tb@openbsd.org>
@@ -121,6 +121,10 @@ ssl_key_share_ecdhe_test(void)
fprintf(stderr, "FAIL: parsed point at infinity\n");
failed |= 1;
}
if (!decode_error) {
fprintf(stderr, "FAIL: no decode_error for point at infinity\n");
failed |= 1;
}
EC_KEY_free(ecdh_peer);
ecdh_peer = NULL;
@@ -133,6 +137,10 @@ ssl_key_share_ecdhe_test(void)
fprintf(stderr, "FAIL: parsed compressed P-384 point\n");
failed |= 1;
}
if (!decode_error) {
fprintf(stderr, "FAIL: no decode_error for compressed P-384 point\n");
failed |= 1;
}
EC_KEY_free(ecdh_peer);
ecdh_peer = NULL;
@@ -145,6 +153,10 @@ ssl_key_share_ecdhe_test(void)
fprintf(stderr, "FAIL: parsed hybrid P-384 point\n");
failed |= 1;
}
if (!decode_error) {
fprintf(stderr, "FAIL: no decode_error for hybrid P-384 point\n");
failed |= 1;
}
EC_KEY_free(ecdh_peer);
ecdh_peer = NULL;