From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Wed, 19 Jun 2013 21:02:45 +0000 (+0200)
Subject: enforce the maximum TLS size when setting MTU
X-Git-Tag: gnutls_3_2_2~45
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=4cd2ba975bc6e1ab4f068127ceab5e66367d3ff8;p=thirdparty%2Fgnutls.git

enforce the maximum TLS size when setting MTU
---

diff --git a/lib/gnutls_dtls.c b/lib/gnutls_dtls.c
index c29105f888..15909830bc 100644
--- a/lib/gnutls_dtls.c
+++ b/lib/gnutls_dtls.c
@@ -578,7 +578,7 @@ void gnutls_dtls_set_timeouts (gnutls_session_t session, unsigned int retrans_ti
  **/
 void gnutls_dtls_set_mtu (gnutls_session_t session, unsigned int mtu)
 {
-  session->internals.dtls.mtu  = mtu;
+  session->internals.dtls.mtu  = MIN(mtu, DEFAULT_MAX_RECORD_SIZE);
 }
 
 static int record_overhead(const cipher_entry_st* cipher, const mac_entry_st* mac,