From 8cd2e1f0f9335221fbad892efdbb5e02e787a1e8 Mon Sep 17 00:00:00 2001 From: Yawning Angel Date: Sat, 24 May 2014 05:06:34 +0000 Subject: Randomize length when the decoder receives an out-of-bound value. This makes the length error and MAC error indistinguishable to an external attacker. --- framing/framing_test.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'framing/framing_test.go') diff --git a/framing/framing_test.go b/framing/framing_test.go index 08f5f17..7df0e28 100644 --- a/framing/framing_test.go +++ b/framing/framing_test.go @@ -86,7 +86,7 @@ func TestEncoder_Encode_Oversize(t *testing.T) { encoder := newEncoder(t) var frame [MaximumSegmentLength]byte - var buf [MaximumFramePayloadLength+1]byte + var buf [MaximumFramePayloadLength + 1]byte _, _ = rand.Read(buf[:]) // YOLO _, err := encoder.Encode(frame[:], buf[:]) if _, ok := err.(InvalidPayloadLengthError); !ok { -- cgit v1.2.3