Rewrite legacy DTLS unexpected handshake message handling.
authorjsing <jsing@openbsd.org>
Fri, 18 Mar 2022 18:00:54 +0000 (18:00 +0000)
committerjsing <jsing@openbsd.org>
Fri, 18 Mar 2022 18:00:54 +0000 (18:00 +0000)
commitb51494a22b941cdbe248e97e2dc86dfa862da0f1
tree6fec299ea7debe748e2472ac89e3ec038cf38cf5
parent920637b945ca8b6781da8713dcfe2d5b0768e8e9
Rewrite legacy DTLS unexpected handshake message handling.

Rewrite the code that handles unexpected handshake messages in the legacy
DTLS stack. Parse the DTLS message header up front, then process it based
on the message type. Overall the code should be more strict and we should
reject various invalid messages that would have previously been accepted.

ok inoguchi@ tb@
lib/libssl/d1_pkt.c