mirror of
https://github.com/boykopovar/AnyPS5.git
synced 2026-11-01 12:45:56 +00:00
Maxime DEFRANCESandClaude Fable 5.1
3951444bb7
SSL_select_next_proto validated both lists and threw for an empty list, a zero-length entry or a truncated entry. The firmware 13.42 report on PR #9785 shows the module runs LibreSSL 3.4.1's loop with no validation: a zero-length entry is negotiated, no overlap returns the first supported entry with its unchecked length byte, even for an empty supported list, and an empty peer list has no overlap. Follow that loop, and throw only for the null pointers the module would read. The test places each reported list before a guard page and checks the six reported cases. Co-Authored-By: Claude Fable 5.1 <[email protected]>