Half of the commit for 0.9.8 as the bitmap handling has changed.

(Firstly... ommitted)

Secondly, it wasn't even _dropping_ the offending packets, in the
non-blocking case. It was just returning garbage instead.
PR: #1752
Submitted by: David Woodhouse <dwmw2@infradead.org>

diff --git a/ssl/d1_pkt.c b/ssl/d1_pkt.c
index 0321ee7f15ae2c4c7c3e0efa48511365f0381bb8..9e38cb5bf9f0410334a9ce3b098ece76c3b4f563 100644 (file)
--- a/ssl/d1_pkt.c
+++ b/ssl/d1_pkt.c
@@ -635,6 +635,7 @@ again:
        /* check whether this is a repeat, or aged record */
        if ( ! dtls1_record_replay_check(s, bitmap))
                {
+               rr->length = 0;
                s->packet_length=0; /* dump this record */
                goto again;     /* get another record */
                }