tree 7453215b9688c412f41625a1be999dfbda19f8b5
parent e538d8287e31e70e20002c3a3256a0994b236f18
author Hanno Becker <hanno.becker@arm.com> 1562766823 +0100
committer Hanno Becker <hanno.becker@arm.com> 1565790117 +0100

Don't call ssl_fetch_input for record hdr size check in DTLS

In DTLS, if mbedtls_ssl_fetch_input() is called multiple times without
resetting the input buffer in between, the non-initial calls are functionally
equivalent to mere bounds checks ensuring that the incoming datagram is
large enough to hold the requested data. In the interest of code-size
and modularity (removing a call to a non-const function which is logically
const in this instance), this commit replaces such a call to
mbedtls_ssl_fetch_input() by an explicit bounds check in
ssl_parse_record_header().