CVSROOT:        /cvs
Module name:    src
Changes by:     js...@cvs.openbsd.org   2020/08/09 10:02:58

Modified files:
        lib/libssl     : d1_pkt.c ssl_pkt.c 

Log message:
Use CBB more correctly when writing SSL3/DTLS records.

Previously we used CBB to build the record headers, but not the entire
record. Use CBB_init_fixed() upfront, then build the record header and
add space for the record content. However, in order to do this we need
to determine the length of the record upfront.

This simplifies the code, removes a number of manual bounds checks and
makes way for further improvements.

ok inoguchi@ tb@

Reply via email to