Fix parsing Certificate Request for TLS 1.2.

Fix the logic to skip supported_signature_algorithms in Certificate
Request.

Signed-off-by: Simon Josefsson <simon@josefsson.org>

1 files changed, 3 insertions, 4 deletions

diff --git a/lib/auth_cert.c b/lib/auth_cert.c
index 5b8c163bda..3afc0fe138 100644
--- a/lib/auth_cert.c
+++ b/lib/auth_cert.c
@@ -1353,10 +1353,9 @@ _gnutls_proc_cert_cert_req (gnutls_session_t session, opaque * data,
     {
       /* read supported hashes */
       int hash_num;
-      DECR_LEN (dsize, 1);
-
-      hash_num = p[0] & 0xFF;
-      p++;
+      DECR_LEN (dsize, 2);
+      hash_num = _gnutls_read_uint16 (p);
+      p += 2;
 
       DECR_LEN (dsize, hash_num);
       p += hash_num;