Fixed mishandling of tree structure in the cache for session parameters.

[BearSSL] / src / ssl / ssl_rec_gcm.c

diff --git a/src/ssl/ssl_rec_gcm.c b/src/ssl/ssl_rec_gcm.c
index cfbccec..70df277 100644 (file)
--- a/src/ssl/ssl_rec_gcm.c
+++ b/src/ssl/ssl_rec_gcm.c
@@ -67,7 +67,7 @@ gcm_check_length(const br_sslrec_gcm_context *cc, size_t rlen)
         *  16 bytes for the authentication tag (after the ciphertext)
         */
        (void)cc;
         *  16 bytes for the authentication tag (after the ciphertext)
         */
        (void)cc;

-       return rlen >= 24 && rlen <= (16384 + rlen);
+       return rlen >= 24 && rlen <= (16384 + 24);

 }
 
 /*
 }
 
 /*