DoTls13ClientHello: session length is a sender side requirement

julek-wolfssl · julek-wolfssl · commit 9c4e77d47da1 · 2026-03-10T09:52:06.000+01:00
F-433
diff --git a/src/tls13.c b/src/tls13.c
@@ -6869,11 +6869,7 @@ int DoTls13ClientHello(WOLFSSL* ssl, const byte* input, word32* inOutIdx,
 #endif
 
     sessIdSz = input[args->idx++];
-#ifndef WOLFSSL_TLS13_MIDDLEBOX_COMPAT
     if (sessIdSz > ID_LEN)
-#else
-    if (sessIdSz != ID_LEN && sessIdSz != 0)
-#endif
     {
         ERROR_OUT(INVALID_PARAMETER, exit_dch);
     }

Original file line number	Diff line number	Diff line change
`@@ -6869,11 +6869,7 @@ int DoTls13ClientHello(WOLFSSL* ssl, const byte* input, word32* inOutIdx,`
`6869`	`6869`	`#endif`
`6870`	`6870`
`6871`	`6871`	`sessIdSz = input[args->idx++];`
`6872`		`-#ifndef WOLFSSL_TLS13_MIDDLEBOX_COMPAT`
`6873`	`6872`	`if (sessIdSz > ID_LEN)`
`6874`		`-#else`
`6875`		`- if (sessIdSz != ID_LEN && sessIdSz != 0)`
`6876`		`-#endif`
`6877`	`6873`	`{`
`6878`	`6874`	`ERROR_OUT(INVALID_PARAMETER, exit_dch);`
`6879`	`6875`	`}`