[Bug 39265] New: winhttp may try to decrypt one more ssl message than needed

https://bugs.winehq.org/show_bug.cgi?id=39265

Bug ID: 39265
           Summary: winhttp may try to decrypt one more ssl message than
                    needed
           Product: Wine
           Version: unspecified
          Hardware: x86
                OS: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: winhttp
          Assignee: [e-mail]
          Reporter: [e-mail]
      Distribution: ---

In net.c:642 in read_ssl_chunk there is no break if buf_len == ssl_buf_size.
If buf_len actually becomes equal to ssl_buf_size after buf_len += size, the
loop should break, otherwise a new ssl message will be tried to be read.
Code needs something like this on line 643:
if(buf_len == ssl_buf_size)
    break;

[Bug 39265] winhttp may try to decrypt one more ssl message than needed

https://bugs.winehq.org/show_bug.cgi?id=39265

Sebastian Lackner  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #1 from Sebastian Lackner  ---
This is basically the same situation as in
https://bugs.winehq.org/show_bug.cgi?id=39264, is there a reason why this needs
to be tracked as separate bug?

[Bug 39265] winhttp may try to decrypt one more ssl message than needed

https://bugs.winehq.org/show_bug.cgi?id=39265

--- Comment #2 from [e-mail] ---
Not really.
This is the first time I submit bugs and I thought there should be two bugs,
because they are in separate modules.
You can close it if this will be tracked together with the other.

[Bug 39265] winhttp may try to decrypt one more ssl message than needed

https://bugs.winehq.org/show_bug.cgi?id=39265

Sebastian Lackner  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|---                         |DUPLICATE

--- Comment #3 from Sebastian Lackner  ---
Marking as duplicate, since the situation for both wininet/winhttp is basically
identical.

*** This bug has been marked as a duplicate of bug 39264 ***

[Bug 39265] winhttp may try to decrypt one more ssl message than needed

https://bugs.winehq.org/show_bug.cgi?id=39265

Ken Sharp  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #4 from Ken Sharp  ---
Closing

[Bug 39265] winhttp may try to decrypt one more ssl message than needed

https://bugs.winehq.org/show_bug.cgi?id=39265

Anastasius Focht  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]
            Version|unspecified                 |1.7.51