Merge pull request #495 from tlsfuzzer/ccs-fix

detect malformed CCS messages

Author: tomato42

tlslite/messages.py

@@ -1898,6 +1898,8 @@ def parse(self, p):
         p.setLengthCheck(1)
         self.type = p.get(1)
         p.stopLengthCheck()
+        if p.getRemainingLength():
+            raise DecodeError("Multi-byte CCS message")
         return self
 
     def write(self):

unit_tests/test_tlslite_messages.py

@@ -3278,6 +3278,14 @@ def test_parse(self):
         self.assertIsInstance(ccs, ChangeCipherSpec)
         self.assertEqual(ccs.type, 1)
 
+    def test_parse_wrong_size(self):
+        parser = Parser(bytearray(b'\x01\x01'))
+
+        ccs = ChangeCipherSpec()
+
+        with self.assertRaises(SyntaxError):
+            ccs.parse(parser)
+
 
 class TestNextProtocol(unittest.TestCase):
     def test___init__(self):