CVSROOT: /cvs Module name: src Changes by: js...@cvs.openbsd.org 2020/08/09 10:02:58
Modified files: lib/libssl : d1_pkt.c ssl_pkt.c Log message: Use CBB more correctly when writing SSL3/DTLS records. Previously we used CBB to build the record headers, but not the entire record. Use CBB_init_fixed() upfront, then build the record header and add space for the record content. However, in order to do this we need to determine the length of the record upfront. This simplifies the code, removes a number of manual bounds checks and makes way for further improvements. ok inoguchi@ tb@