CVSROOT: /cvs Module name: src Changes by: js...@cvs.openbsd.org 2020/08/11 13:25:41
Modified files:
lib/libssl : tls13_record_layer.c
Log message:
Send an unexpected message alert if no valid content type is found.
When record protection is engaged, the plaintext must be followed by a
non-zero content type and optional zero padding. If the plaintext is zero
length or only consists of zero bytes then it is not a valid message,
since the content type is unspecified.
ok tb@
