CVSROOT: /cvs Module name: src Changes by: js...@cvs.openbsd.org 2022/03/18 12:00:54
Modified files: lib/libssl : d1_pkt.c Log message: Rewrite legacy DTLS unexpected handshake message handling. Rewrite the code that handles unexpected handshake messages in the legacy DTLS stack. Parse the DTLS message header up front, then process it based on the message type. Overall the code should be more strict and we should reject various invalid messages that would have previously been accepted. ok inoguchi@ tb@