From: tb <tb@openbsd.org>
Date: Sun, 22 Sep 2024 14:59:48 +0000 (+0000)
Subject: Reinstate bounds check accidentally disabled when defining OPENSSL_NO_DTLS1
X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=6eec31fbd1531a4cf7789a6ac2d1a71554e28336;p=openbsd

Reinstate bounds check accidentally disabled when defining OPENSSL_NO_DTLS1

From Kenjiro Nakayama
Closes https://github.com/libressl/portable/issues/1097
---

diff --git a/lib/libssl/ssl_lib.c b/lib/libssl/ssl_lib.c
index 1a2bf369520..63d72baf8e1 100644
--- a/lib/libssl/ssl_lib.c
+++ b/lib/libssl/ssl_lib.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl_lib.c,v 1.329 2024/08/03 04:50:27 tb Exp $ */
+/* $OpenBSD: ssl_lib.c,v 1.330 2024/09/22 14:59:48 tb Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -1372,10 +1372,8 @@ SSL_ctrl(SSL *s, int cmd, long larg, void *parg)
 		s->max_cert_list = larg;
 		return (l);
 	case SSL_CTRL_SET_MTU:
-#ifndef OPENSSL_NO_DTLS1
 		if (larg < (long)dtls1_min_mtu())
 			return (0);
-#endif
 		if (SSL_is_dtls(s)) {
 			s->d1->mtu = larg;
 			return (larg);