]> git.ipfire.org Git - thirdparty/openssl.git/commit
Ensure we properly release DTLS buffered app data records
authorMatt Caswell <matt@openssl.org>
Fri, 2 May 2025 15:37:32 +0000 (16:37 +0100)
committerTodd Short <todd.short@me.com>
Thu, 8 May 2025 18:06:11 +0000 (14:06 -0400)
commitd2a33efd394f216e04a28a3ce69526dbbec2385a
treef9a269a6db8f9086232293d96d3c9718818f51e1
parent4dca928a29cbe413f2416ac5e1ba2fe4e073f608
Ensure we properly release DTLS buffered app data records

If we read an app data record before we have read the Finished we buffer
it. Once we've read it we need to make sure we've properly released it
otherwise we will attempt to read it again (and this time there will be
no data in it).

Fixes #27316

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Todd Short <todd.short@me.com>
(Merged from https://github.com/openssl/openssl/pull/27543)
ssl/record/rec_layer_s3.c