cuberite/polarssl
1
0
Fork 0
mirror of https://github.com/cuberite/polarssl.git synced 2025-11-04 04:32:24 -05:00
Code Issues Packages Projects Releases Wiki Activity

Correct record header size in case of TLS

Browse Source 
The previous commit reduced the internal header size to 5 bytes in case of
TLS. This is not a valid since in that situation Mbed TLS internally uses the
first 8 bytes of the message buffer for the implicit record sequence number.
This commit is contained in:
Hanno Becker 2017-12-07 08:22:51 +00:00
parent d25d444134
commit 25d6d1a1df
1 changed files with 3 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
include/mbedtls/ssl_internal.h
View File

@ -158,14 +158,10 @@
#error Bad configuration - protected record payload too large.
#endif
#if !defined(MBEDTLS_SSL_PROTO_DTLS)
/* https://tools.ietf.org/html/rfc5246#section-6.2 */
#define MBEDTLS_SSL_HEADER_LEN 5
#else
/* https://tools.ietf.org/html/rfc6347#section-4.1 */
/* 8 additional bytes for epoch and sequence number */
/* Note: Even though the TLS record header is only 5 bytes
long, we're internally using 8 bytes to store the
implicit sequence number. */
#define MBEDTLS_SSL_HEADER_LEN 13
#endif
#define MBEDTLS_SSL_BUFFER_LEN \
( ( MBEDTLS_SSL_HEADER_LEN ) + ( MBEDTLS_SSL_PAYLOAD_LEN ) )