decode check for signature_algorithms

haskell-tls · Jan 15, 2025 · c067baa · c067baa
1 parent 2a4fd0c
commit c067baa
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/tls/Network/TLS/Extension.hs b/tls/Network/TLS/Extension.hs
@@ -570,6 +570,7 @@ decodeSignatureAlgorithms = runGetMaybe $ do
         getList (fromIntegral len) (getSignatureHashAlgorithm >>= \sh -> return (2, sh))
     leftoverLen <- remaining
     when (leftoverLen /= 0) $ fail "decodeSignatureAlgorithms: broken length"
+    when (null sas) $ fail "signature algorithms are empty"
     return $ SignatureAlgorithms sas
 
 ------------------------------------------------------------