Don't allow too many consecutive warning alerts
authorMatt Caswell <matt@openssl.org>
Wed, 21 Sep 2016 13:07:31 +0000 (14:07 +0100)
committerMatt Caswell <matt@openssl.org>
Wed, 21 Sep 2016 19:17:04 +0000 (20:17 +0100)
commitaf58be768ebb690f78530f796e92b8ae5c9a4401
tree087701bd731382d1933438bcd73cb7029264e16b
parent7dc0ad4d6dca81a003be7fa1fbd58a55f4be8646
Don't allow too many consecutive warning alerts

Certain warning alerts are ignored if they are received. This can mean that
no progress will be made if one peer continually sends those warning alerts.
Implement a count so that we abort the connection if we receive too many.

Issue reported by Shi Lei.

Reviewed-by: Rich Salz <rsalz@openssl.org>
include/openssl/ssl.h
ssl/record/rec_layer_d1.c
ssl/record/rec_layer_s3.c
ssl/record/record.h
ssl/record/record_locl.h
ssl/ssl_err.c