commit 9415a14acf8ea9e84118f1b1ab1f0d97a3de1d19
author David Benjamin <davidben@google.com> Wed Oct 26 09:58:16 2016 -0400
committer Adam Langley <agl@google.com> Wed Oct 26 17:18:42 2016 +0000
tree 17de79394f46c77da01e8b9be33733f7af473ae4
parent a1bbacac51a550fbc4231a88380b8ebf586da6dd

Fix SSL_CTX_set1_curves fuzzer.

SSL_CTX_set1_curves was being called with the size of the input data in
bytes rather than in ints.

BUG=chromium:659361

Change-Id: I90da1c6d60e92423c6b7d9efd744ae70ff589172
Reviewed-on: https://boringssl-review.googlesource.com/11840
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: Adam Langley <agl@google.com>

fuzz/ssl_ctx_api.cc

diff --git a/fuzz/ssl_ctx_api.cc b/fuzz/ssl_ctx_api.cc
index 4af80c2..a66b1a8 100644
--- a/fuzz/ssl_ctx_api.cc
+++ b/fuzz/ssl_ctx_api.cc
@@ -399,7 +399,7 @@
         return;
       }
       SSL_CTX_set1_curves(ctx, reinterpret_cast<const int *>(curves.data()),
-                          curves.size());
+                          curves.size() / sizeof(int));
     },
     [](SSL_CTX *ctx, CBS *cbs) {
       std::string curves;