diff options
| author | Alex Chernyakhovsky <achernya@google.com> | 2014-11-02 02:39:08 +0300 |
|---|---|---|
| committer | Adam Langley <agl@google.com> | 2014-11-14 01:58:30 +0300 |
| commit | 4cd8c43e738b0903cb1782b7b77a69f7aa778406 (patch) | |
| tree | 87dedaa93a279707d2673666e3016b4c3a888654 /include/openssl/ssl3.h | |
| parent | bdf5e72f50e25f0e45e825c156168766d8442dde (diff) | |
Remove support for processing fragmented alerts
Prior to this change, BoringSSL maintained a 2-byte buffer for alerts,
and would support reassembly of fragmented alerts.
NSS does not support fragmented alerts, nor would any reasonable
implementation produce them. Remove fragmented alert handling and
produce an error if a fragmented alert has ever been encountered.
Change-Id: I31530ac372e8a90b47cf89404630c1c207cfb048
Reviewed-on: https://boringssl-review.googlesource.com/2125
Reviewed-by: Adam Langley <agl@google.com>
Diffstat (limited to 'include/openssl/ssl3.h')
| -rw-r--r-- | include/openssl/ssl3.h | 4 |
1 files changed, 1 insertions, 3 deletions
diff --git a/include/openssl/ssl3.h b/include/openssl/ssl3.h index 50831671..42e21542 100644 --- a/include/openssl/ssl3.h +++ b/include/openssl/ssl3.h @@ -372,10 +372,8 @@ typedef struct ssl3_state_st SSL3_RECORD rrec; /* each decoded record goes in here */ SSL3_RECORD wrec; /* goes out from here */ - /* storage for Alert/Handshake protocol data received but not + /* storage for Handshake protocol data received but not * yet processed by ssl3_read_bytes: */ - unsigned char alert_fragment[2]; - unsigned int alert_fragment_len; unsigned char handshake_fragment[4]; unsigned int handshake_fragment_len; |