fixup! Sanity tests of inputs to ssl_version_cmp

fwh-dc · Apr 30, 2024 · 8c39ca1 · 8c39ca1
1 parent c6d0b16
commit 8c39ca1
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/ssl/statem/statem_lib.c b/ssl/statem/statem_lib.c
@@ -2153,6 +2153,9 @@ int ssl_choose_server_version(SSL_CONNECTION *s, CLIENTHELLO_MSG *hello,
     int disabled = 0;
     RAW_EXTENSION *suppversions;
 
+    if (client_version <= 0)
+        return SSL_R_WRONG_SSL_VERSION;
+
     s->client_version = client_version;
 
     switch (server_version) {