Re: [Help-gnutls] segfault in internal function

[Regit]

Hi,

I've done :
if (pad > ciphertext.size - hash_size) {
                        gnutls_assert();
                        /* We do not fail here. We check below for the
                         * the pad_failed. If zero means success.
                         */
                        pad_failed = GNUTLS_E_DECRYPTION_FAILED;
                        return pad_failed;
                }


And it works till a hour now. This is a never reached time during our
stress test.
Our stress test is basically having 200 processes connecting to the
server at the same time, again and again and very quickly. This was
enough to kill the server in usually less than 15min.

BR,
Le mercredi 27 avril 2005 à 18:04 +0200, Nikos Mavrogiannopoulos a
écrit :
> On Wednesday 27 April 2005 17:46, Regit wrote:
> > Hi,
> 
> > Sorry to be so noisy today but it seems that gnutls_assert is not a quit
> > function.
> > Thus we really do
> >     ciphertext.data[-1]
> > in file gnutls_cipher.c:453 under the bad condition detailled below.
> So if you change this check (line 471) by:
> if (ver >= GNUTLS_TLS1 && pad_failed==0)
> 
> fixes the problem?
> 
> > BR,
>