commit 1c0c37feed9ba4e292159c931dad1ae10e16fab0
author Hanno Becker <hanno.becker@arm.com> Tue Aug 07 14:29:29 2018 +0100
committer Hanno Becker <hanno.becker@arm.com> Thu Apr 25 12:58:21 2019 +0100
tree 4095b8365432e100ae887eebf1fa3eef9d4a90d0
parent b3268dac006b19457d3597a94d0c5f4f1c5030eb

Move debugging output after record decryption

The debugging call printing the decrypted record payload happened
before updating ssl->in_msglen.

library/ssl_tls.c

diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index 79e0623..88b39b7 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -4641,13 +4641,14 @@
             return( ret );
         }
 
-        MBEDTLS_SSL_DEBUG_BUF( 4, "input payload after decrypt",
-                       ssl->in_msg, ssl->in_msglen );
 
         ssl->in_msglen = rec.data_len;
         ssl->in_len[0] = (unsigned char)( rec.data_len >> 8 );
         ssl->in_len[1] = (unsigned char)( rec.data_len      );
 
+        MBEDTLS_SSL_DEBUG_BUF( 4, "input payload after decrypt",
+                       ssl->in_msg, ssl->in_msglen );
+
         if( ssl->in_msglen > MBEDTLS_SSL_IN_CONTENT_LEN )
         {
             MBEDTLS_SSL_DEBUG_MSG( 1, ( "bad message length" ) );