[openssl/openssl] 87d7f1: rec_layer_s3.c: prevent max_early_data overflow in...

  Branch: refs/heads/openssl-3.4
  Home:   https://github.com/openssl/openssl
  Commit: 87d7f1b05504df8673ee2554b1e0b54ff6600e3b
      https://github.com/openssl/openssl/commit/87d7f1b05504df8673ee2554b1e0b54ff6600e3b
  Author: Eugene Syromiatnikov <[email protected]>
  Date:   2026-06-25 (Thu, 25 Jun 2026)

  Changed paths:
    M ssl/record/rec_layer_s3.c

  Log Message:
  -----------
  rec_layer_s3.c: prevent max_early_data overflow in ossl_early_data_count_ok()

Apply change similar to the one made in d41a9225196b "tls_common.c: prevent
max_early_data overflow in rlayer_early_data_count_ok()"
to ossl_early_data_count_ok(), that has similar logic in it
(as rlayer_early_data_count_ok() has been copied
from ossl_early_data_count_ok() in 9dd90232d537 "Move early data counting
out of the SSL object and into the record layer").

Complements: d41a9225196b "tls_common.c: prevent max_early_data overflow in rlayer_early_data_count_ok()"
Fixes: 70ef40a05e06 "Check max_early_data against the amount of early data we actually receive"
Signed-off-by: Eugene Syromiatnikov <[email protected]>

Reviewed-by: Paul Dale <[email protected]>
Reviewed-by: Daniel Kubec <[email protected]>
MergeDate: Thu Jun 25 07:14:06 2026
(Merged from https://github.com/openssl/openssl/pull/31628)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/openssl-3.4/07ee8e-87d7f1%40github.com.