dropped packets are also reported on gnutls_deinit() to ensure that they are not...

diff --git a/lib/gnutls_state.c b/lib/gnutls_state.c
index 3c12508cc5e7cd012a9b1148a08f41bf6688f4bb..43602cc340bb3254d954a6f8b23957c5cba93ab1 100644 (file)
--- a/lib/gnutls_state.c
+++ b/lib/gnutls_state.c
@@ -425,6 +425,10 @@ gnutls_deinit (gnutls_session_t session)
   if (session == NULL)
     return;
 
+  if (IS_DTLS(session) && session->internals.dtls.packets_dropped > 0)
+    _gnutls_audit_log(session, "Discarded %u messages (duplicates or invalid decryption)\n", 
+                      (unsigned int)session->internals.dtls.packets_dropped);
+
   /* remove auth info firstly */
   _gnutls_free_auth_info (session);