[openssl/openssl] 5c4769: Handle app data records from the next epoch
Matt Caswell
noreply at github.com
Fri Mar 31 08:24:44 UTC 2023
Branch: refs/heads/master
Home: https://github.com/openssl/openssl
Commit: 5c476976ab8ef057ddbd8f110249d7c796a7f1b1
https://github.com/openssl/openssl/commit/5c476976ab8ef057ddbd8f110249d7c796a7f1b1
Author: Matt Caswell <matt at openssl.org>
Date: 2023-03-31 (Fri, 31 Mar 2023)
Changed paths:
M ssl/record/methods/dtls_meth.c
Log Message:
-----------
Handle app data records from the next epoch
It is possible that DTLS records are received out of order such that
records from the next epoch arrive before we have finished processing the
current epoch. We are supposed to buffer such records but for some reason
we only did that for handshake and alert records. This is incorrect since
it is perfectly possible for app data records to arrive early too.
Fixes #20597
Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20628)
Commit: 8189fe242bba319dfccd8805fd7703d973bf9649
https://github.com/openssl/openssl/commit/8189fe242bba319dfccd8805fd7703d973bf9649
Author: Matt Caswell <matt at openssl.org>
Date: 2023-03-31 (Fri, 31 Mar 2023)
Changed paths:
M test/dtlstest.c
M test/helpers/ssltestlib.c
M test/helpers/ssltestlib.h
Log Message:
-----------
Add a test for an app data record appearing before epoch change in DTLS
We had a test for a handshake record appearing before epoch change, and
a test for an app data record appearing before Finished - but not one for
the app data record appearing before epoch change.
Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20628)
Compare: https://github.com/openssl/openssl/compare/bbe9d2de6c64...8189fe242bba
More information about the openssl-commits
mailing list