Arto Kinnunen 7f8089b2ec Fix mbedtls_ssl_check_record usage with ext buf ...

Record checking fails if mbedtls_ssl_check_record() is called with
external buffer. Received record sequence number is available in the
incoming record but it is not available in the ssl contexts `in_ctr`-
variable that is used when decoding the sequence number.

To fix the problem, temporarily update ssl context `in_ctr` to
point to the received record header and restore value later.

2019-10-29 13:51:37 +02:00

415 KiB

Raw Blame History

View Raw