[openssl/openssl] 5c4769: Handle app data records from the next epoch

[Matt Caswell]

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 5c476976ab8ef057ddbd8f110249d7c796a7f1b1
      https://github.com/openssl/openssl/commit/5c476976ab8ef057ddbd8f110249d7c796a7f1b1
  Author: Matt Caswell <matt at openssl.org>
  Date:   2023-03-31 (Fri, 31 Mar 2023)

  Changed paths:
    M ssl/record/methods/dtls_meth.c

  Log Message:
  -----------
  Handle app data records from the next epoch

It is possible that DTLS records are received out of order such that
records from the next epoch arrive before we have finished processing the
current epoch. We are supposed to buffer such records but for some reason
we only did that for handshake and alert records. This is incorrect since
it is perfectly possible for app data records to arrive early too.

Fixes #20597

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20628)


  Commit: 8189fe242bba319dfccd8805fd7703d973bf9649
      https://github.com/openssl/openssl/commit/8189fe242bba319dfccd8805fd7703d973bf9649
  Author: Matt Caswell <matt at openssl.org>
  Date:   2023-03-31 (Fri, 31 Mar 2023)

  Changed paths:
    M test/dtlstest.c
    M test/helpers/ssltestlib.c
    M test/helpers/ssltestlib.h

  Log Message:
  -----------
  Add a test for an app data record appearing before epoch change in DTLS

We had a test for a handshake record appearing before epoch change, and
a test for an app data record appearing before Finished - but not one for
the app data record appearing before epoch change.

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20628)


Compare: https://github.com/openssl/openssl/compare/bbe9d2de6c64...8189fe242bba