commit 8b4114fd1248db6c7a9e4fac5a3d3d1e3180f011
author Kazuho Oku <kazuhooku@gmail.com> Thu Feb 02 14:32:25 2023 +0900
committer Kazuho Oku <kazuhooku@gmail.com> Thu Feb 02 14:32:44 2023 +0900
tree f87db9852ecaade6638776ef2fe6e66640e4742f
parent 0cb2744840f292a78570fd886061b7d2893e0844

call out decode error if odd-sized

lib/picotls.c

diff --git a/lib/picotls.c b/lib/picotls.c
index abb17b6..e1d0dfd 100644
--- a/lib/picotls.c
+++ b/lib/picotls.c
@@ -3541,6 +3541,10 @@
 
     /* decode and select from ciphersuites */
     ptls_decode_open_block(src, end, 2, {
+        if ((end - src) % 2 != 0) {
+            ret = PTLS_ALERT_DECODE_ERROR;
+            goto Exit;
+        }
         ch->cipher_suites = ptls_iovec_init(src, end - src);
         src = end;
     });