DTLS handshake message fragments musn't span packets
authorMatt Caswell <matt@openssl.org>
Mon, 1 Jun 2015 16:25:29 +0000 (17:25 +0100)
committerMatt Caswell <matt@openssl.org>
Wed, 10 Jun 2015 11:06:29 +0000 (12:06 +0100)
commit91d13f1a76216f7d67f7a3068bab2287831ca615
tree1f57cb43ad2f69e9fdd074b4ce3e1cf3165ec6cc
parentb821df5f5b8dbb9bae109ed01076cb4b393b67e0
DTLS handshake message fragments musn't span packets

It should not be possible for DTLS message fragments to span multiple
packets. However previously if the message header fitted exactly into one
packet, and the fragment body was in the next packet then this would work.
Obviously this would fail if packets get re-ordered mid-flight.

Reviewed-by: Tim Hudson <tjh@openssl.org>
ssl/d1_both.c