api: make sure len doesn't overrun the input buffer

julek-wolfssl · Jan 30, 2025 · e4b7a53 · e4b7a53
1 parent 2865b0c
commit e4b7a53
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/tests/api.c b/tests/api.c
@@ -99175,6 +99175,8 @@ static int test_dtls_frag_ch_count_records(byte* b, int len)
         records++;
         dtlsRH = (DtlsRecordLayerHeader*)b;
         recordLen = (dtlsRH->length[0] << 8) | dtlsRH->length[1];
+        if (recordLen > (size_t)len)
+            break;
         b += sizeof(DtlsRecordLayerHeader) + recordLen;
         len -= sizeof(DtlsRecordLayerHeader) + recordLen;
     }