[gnutls-devel] GnuTLS | supported_groups: rewrite group negotiation without nested loop (!2120)

(Deprecated) Read-only notification of GnuTLS library development activities gnutls-devel at lists.gnutls.org
Mon Aug 3 10:44:17 CEST 2026



Merge request https://gitlab.com/gnutls/gnutls/-/merge_requests/2120 was reviewed by Sahana Prasad

--
  
Sahana Prasad started a new discussion on lib/ext/supported_groups.c: https://gitlab.com/gnutls/gnutls/-/merge_requests/2120#note_3635615392

 > -		/* we figure what is the minimum DH allowed for this session, if any */
 > -		min_dh = get_min_dh(session);
 > +	if (len != data_size)

Here we are forcing a strict check for length which seem correct, as opposed to the old code where padded bytes/trailing bytes were ignored, I hope that we were not tolerating such supported_groups extension previously.


-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/2120
You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/namespace/17175643/sent_notifications/6-alev8ti15gva04994hobwo786-a84t7/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20260803/94c108b1/attachment.html>


More information about the Gnutls-devel mailing list