Don't allow too many consecutive warning alerts
authorMatt Caswell <matt@openssl.org>
Wed, 21 Sep 2016 13:48:16 +0000 (14:48 +0100)
committerMatt Caswell <matt@openssl.org>
Wed, 21 Sep 2016 19:14:16 +0000 (20:14 +0100)
commit22646a075e75991b4e8f5d67171e45a6aead5b48
treea5ebd3c9be52ec93743391e9d8a817021e5810c0
parent006a788c84e541c8920dd2ad85fb62b52185c519
Don't allow too many consecutive warning alerts

Certain warning alerts are ignored if they are received. This can mean that
no progress will be made if one peer continually sends those warning alerts.
Implement a count so that we abort the connection if we receive too many.

Issue reported by Shi Lei.

Reviewed-by: Rich Salz <rsalz@openssl.org>
ssl/d1_pkt.c
ssl/s3_pkt.c
ssl/ssl.h
ssl/ssl_locl.h