src/java.base/share/classes/sun/security/ssl/Handshaker.java

8180643 Illegal handshake message

*** 1032,1041 ****
--- 1032,1047 ----
               * we can read and process an entire message.
               */
              input.mark(4);
  
              messageType = (byte)input.getInt8();
+             if (HandshakeMessage.isUnsupported(messageType)) {
+                 throw new SSLProtocolException(
+                     "Received unsupported or unknown handshake message: " +
+                     messageType);
+             }
+ 
              messageLen = input.getInt24();
  
              if (input.available() < messageLen) {
                  input.reset();
                  return;