Switch an assert back to a check.
The assert was supposed to be *added* in fcf25833 but instead replaced
the check.
BUG=465557
Change-Id: I0d3db5038515021e5bdd1ccb9ff08d4f78552621
Reviewed-on: https://boringssl-review.googlesource.com/3850
Reviewed-by: David Benjamin <davidben@chromium.org>
Reviewed-by: Adam Langley <agl@google.com>
diff --git a/ssl/s3_pkt.c b/ssl/s3_pkt.c
index 95737a7..69cdb1e 100644
--- a/ssl/s3_pkt.c
+++ b/ssl/s3_pkt.c
@@ -201,7 +201,10 @@
rb->offset = len + align;
}
- assert(n <= (int)(rb->len - rb->offset));
+ if (n > (int)(rb->len - rb->offset)) {
+ OPENSSL_PUT_ERROR(SSL, ssl3_read_n, ERR_R_INTERNAL_ERROR);
+ return -1;
+ }
if (!s->read_ahead) {
/* ignore max parameter */