commit 08485cca81a1a86577489d04875370690027a7cf
author Manuel Pégourié-Gonnard <mpg@elzevir.fr> Wed Jun 18 23:11:34 2014 +0200
committer Paul Bakker <p.j.bakker@polarssl.org> Wed Jun 25 11:26:12 2014 +0200
tree 2a9307010f58c0537e49e3ef4ff4b471291bbf44
parent 8920f69fef08bce1f445160f52730fd067f1f516

Fix SSL_BUFFER_LEN

include/polarssl/ssl.h

diff --git a/include/polarssl/ssl.h b/include/polarssl/ssl.h
index 21ed42e..91e3981 100644
--- a/include/polarssl/ssl.h
+++ b/include/polarssl/ssl.h
@@ -258,8 +258,8 @@
 /* \} name SECTION: Module settings */
 
 /*
- * Allow an extra 301 bytes for the record header
- * and encryption overhead: counter (8) + header (5) + MAC (32) + padding (256)
+ * Allow an extra 301 bytes for the record header and encryption overhead:
+ * counter (8) + header (5) + IV(16) + MAC (48) + padding (256)
  * and allow for a maximum of 1024 of compression expansion if
  * enabled.
  */
@@ -269,7 +269,7 @@
 #define SSL_COMPRESSION_ADD             0
 #endif
 
-#define SSL_BUFFER_LEN (SSL_MAX_CONTENT_LEN + SSL_COMPRESSION_ADD + 301)
+#define SSL_BUFFER_LEN (SSL_MAX_CONTENT_LEN + SSL_COMPRESSION_ADD + 333)
 
 #define SSL_EMPTY_RENEGOTIATION_INFO    0xFF   /**< renegotiation info ext */