From 908449e360a49f30062a3f050bf5821c58dfc772 Mon Sep 17 00:00:00 2001
From: Vladimir Dubrovin <3proxy@3proxy.ru>
Date: Tue, 10 Nov 2026 15:20:03 +0300
Subject: [PATCH] tlspr: a ServerHello too short for the extensions length
 refused (#1286)

---
 src/tlspr.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/tlspr.c b/src/tlspr.c
index 3571b4f..70d0087 100644
--- a/src/tlspr.c
+++ b/src/tlspr.c
@@ -224,6 +224,7 @@ int parsehello(int type, unsigned char *hello, unsigned len, char *sni, int * sn
     else if(type == 2){
 	offset += 3;
     }
+    if((offset + 2) > len) return -6;
     elen = size16(hello+offset);
     offset += 2;
     if(elen+offset != len) return -9;