From: Bernd Edlinger <bernd.edlinger@hotmail.de>
Date: Mon, 23 Aug 2021 12:03:20 +0000 (+0200)
Subject: Fix the array size of dtlsseq in tls1_enc
X-Git-Tag: openssl-3.0.0~70
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=562d4cd3c35b32f2bc6ac0770b80ce394f8d76a4;p=thirdparty%2Fopenssl.git

Fix the array size of dtlsseq in tls1_enc

Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/16385)
---

diff --git a/ssl/record/ssl3_record.c b/ssl/record/ssl3_record.c
index 30af6508a75..b6ac61e0e80 100644
--- a/ssl/record/ssl3_record.c
+++ b/ssl/record/ssl3_record.c
@@ -1047,7 +1047,7 @@ int tls1_enc(SSL *s, SSL3_RECORD *recs, size_t n_recs, int sending,
 
                 if (SSL_IS_DTLS(s)) {
                     /* DTLS does not support pipelining */
-                    unsigned char dtlsseq[9], *p = dtlsseq;
+                    unsigned char dtlsseq[8], *p = dtlsseq;
 
                     s2n(sending ? DTLS_RECORD_LAYER_get_w_epoch(&s->rlayer) :
                         DTLS_RECORD_LAYER_get_r_epoch(&s->rlayer), p);