summaryrefslogtreecommitdiffstats
path: root/ssl/ssl_err.c
diff options
context:
space:
mode:
authorMatt Caswell <matt@openssl.org>2016-07-05 09:51:08 +0100
committerMatt Caswell <matt@openssl.org>2016-08-19 13:52:40 +0100
commit738ad946ddf7cbb839447981304df89f5f83b18b (patch)
tree33f6e1c6481229e0183245e90b2113327c21ce26 /ssl/ssl_err.c
parent6fc1748ec65c94c195d02b59556434e36a5f7651 (diff)
Fix DTLS unprocessed records bug
During a DTLS handshake we may get records destined for the next epoch arrive before we have processed the CCS. In that case we can't decrypt or verify the record yet, so we buffer it for later use. When we do receive the CCS we work through the queue of unprocessed records and process them. Unfortunately the act of processing wipes out any existing packet data that we were still working through. This includes any records from the new epoch that were in the same packet as the CCS. We should only process the buffered records if we've not got any data left. Reviewed-by: Richard Levitte <levitte@openssl.org>
Diffstat (limited to 'ssl/ssl_err.c')
0 files changed, 0 insertions, 0 deletions