X-Git-Url: http://review.tizen.org/git/?a=blobdiff_plain;f=resource%2Fcsdk%2Fconnectivity%2Fsrc%2Fadapter_util%2Fca_adapter_net_ssl.c;h=6dd925a3c95552fcf65bd735e9cda163e44118f2;hb=refs%2Ftags%2Fsubmit%2Ftizen_4.0%2F20180301.224914;hp=7be3576a85d3eac910812eaaeef349d69a624f73;hpb=d8b4d385e72aa8ddfd9824c7594dc5d44709100a;p=platform%2Fupstream%2Fiotivity.git diff --git a/resource/csdk/connectivity/src/adapter_util/ca_adapter_net_ssl.c b/resource/csdk/connectivity/src/adapter_util/ca_adapter_net_ssl.c index 7be3576..6dd925a 100644 --- a/resource/csdk/connectivity/src/adapter_util/ca_adapter_net_ssl.c +++ b/resource/csdk/connectivity/src/adapter_util/ca_adapter_net_ssl.c @@ -1698,6 +1698,11 @@ static void SetupCipher(mbedtls_ssl_config * config, CATransportAdapter_t adapte memset(g_cipherSuitesList, 0, sizeof(g_cipherSuitesList)); + if (SSL_CIPHER_MAX < g_caSslContext->cipher) + { + OIC_LOG(ERROR, NET_SSL_TAG, "Maximum ciphersuite index exceeded"); + } + // Add the preferred ciphersuite first if (SSL_CIPHER_MAX != g_caSslContext->cipher) { @@ -1708,6 +1713,7 @@ static void SetupCipher(mbedtls_ssl_config * config, CATransportAdapter_t adapte // Add PSK ciphersuite if (true == g_caSslContext->cipherFlag[0] && + SSL_CIPHER_MAX != g_caSslContext->cipher && MBEDTLS_TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256 != tlsCipher[g_caSslContext->cipher][0]) { g_cipherSuitesList[index] = MBEDTLS_TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256;