commit af3b8a990c9f3117fe19afb0cb9ba42ba34637f7
author Steven Valdez <svaldez@google.com> Tue Nov 01 12:49:22 2016 -0400
committer David Benjamin <davidben@google.com> Tue Nov 01 17:28:02 2016 +0000
tree a83114ef4464fa4f49793b279a7836a35bdfc763
parent 70aba26c757b933fe142bb4656d5a4d555601134

Fix multiple PSK identity parsing.

Change-Id: I3b43e8eb04c111731acc4fc06677fef8da09a646
Reviewed-on: https://boringssl-review.googlesource.com/12020
Reviewed-by: David Benjamin <davidben@google.com>

ssl/t1_lib.c

diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c
index a265a2e..fffde09 100644
--- a/ssl/t1_lib.c
+++ b/ssl/t1_lib.c
@@ -1982,7 +1982,7 @@
       !CBS_get_u8_length_prefixed(&identity, &ke_modes) ||
       !CBS_get_u8_length_prefixed(&identity, &auth_modes) ||
       !CBS_get_u16_length_prefixed(&identity, &ticket) ||
-      CBS_len(&identity) != 0) {
+      CBS_len(contents) != 0) {
     *out_alert = SSL_AD_DECODE_ERROR;
     return 0;
   }