]> git.ipfire.org Git - people/ms/strongswan.git/commit
tls-socket: Handle sending fatal errors better
authorTobias Brunner <tobias@strongswan.org>
Mon, 15 Nov 2021 13:39:22 +0000 (14:39 +0100)
committerTobias Brunner <tobias@strongswan.org>
Wed, 8 Dec 2021 10:32:50 +0000 (11:32 +0100)
commitd95381ec7a50c6c31a3524a4ca1f9efc8a655dc0
treebb9bed14028826cf8db038d39eb19dde02a4c371
parent01485770fd60af918683400719d6d12ac6393c5e
tls-socket: Handle sending fatal errors better

In particular as server, the previous code might cause it to hang in
recv() if this case wasn't triggered by a close notify (followed by a
shutdown of the socket) but it e.g. failed processing a ServerHello and
responded with a fatal alert.

Fixes: 09fbaad6bd71 ("tls-socket: Don't fail reading if sending data failed")
src/libtls/tls_socket.c