enforce the maximum TLS size when setting MTU

diff --git a/lib/gnutls_dtls.c b/lib/gnutls_dtls.c
index c29105f88875ee35542b626a21f12eee7963f2d6..15909830bc570cc41a603840ed8f190874715cf5 100644 (file)
--- a/lib/gnutls_dtls.c
+++ b/lib/gnutls_dtls.c
@@ -578,7 +578,7 @@ void gnutls_dtls_set_timeouts (gnutls_session_t session, unsigned int retrans_ti
  **/
 void gnutls_dtls_set_mtu (gnutls_session_t session, unsigned int mtu)
 {
-  session->internals.dtls.mtu  = mtu;
+  session->internals.dtls.mtu  = MIN(mtu, DEFAULT_MAX_RECORD_SIZE);
 }
 
 static int record_overhead(const cipher_entry_st* cipher, const mac_entry_st* mac,