nghttpx: Drop connection if client TLS handshake packet is too large

nshoemaker · Aug 12, 2015 · 4733112 · 4733112
1 parent 0c4cbc8
commit 4733112
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/src/shrpx_connection.cc b/src/shrpx_connection.cc
@@ -341,6 +341,13 @@ int Connection::tls_handshake() {
     auto err = SSL_get_error(tls.ssl, rv);
     switch (err) {
     case SSL_ERROR_WANT_READ:
+      if (read_buffer_full(tls.rbuf)) {
+        if (LOG_ENABLED(INFO)) {
+          LOG(INFO) << "tls: handshake message is too large";
+        }
+        return -1;
+      }
+      break;
     case SSL_ERROR_WANT_WRITE:
       break;
     default: