tree 800791c03d545919a9db5efa32ed6659d4504206
parent 3be264e2c33a7de193ede8b7987f8609093c870a
author Hanno Becker <hanno.becker@arm.com> 1562689802 +0100
committer Hanno Becker <hanno.becker@arm.com> 1565789518 +0100

Check architectural bound for max record payload len in one place

The previous code performed architectural maximum record length checks
both before and after record decryption. Since MBEDTLS_SSL_IN_CONTENT_LEN
bounds the maximum length of the record plaintext, it suffices to check
only once after (potential) decryption.

This must not be confused with the internal check that the record
length is small enough to make the record fit into the internal input
buffer; this is done in mbedtls_ssl_fetch_input().