Resolves Mbed-TLS#2916

It is sufficient to check for the strongest limit only.
irwir · Apr 1, 2020 · 32d1a9d · 32d1a9d
1 parent 65cc9a2
commit 32d1a9d
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/library/ssl_srv.c b/library/ssl_srv.c
@@ -2971,9 +2971,7 @@ static int ssl_write_certificate_request( mbedtls_ssl_context *ssl )
         {
             dn_size = crt->subject_raw.len;
 
-            if( end < p ||
-                (size_t)( end - p ) < dn_size ||
-                (size_t)( end - p ) < 2 + dn_size )
+            if( end < p || (size_t)( end - p ) < 2 + dn_size )
             {
                 MBEDTLS_SSL_DEBUG_MSG( 1, ( "skipping CAs: buffer too short" ) );
                 break;