tree b283bda1800411d346353b021a00973b0e51dbf7
parent 408a2742b3da1e593448232c7897c67f063615ab
author Hanno Becker <hanno.becker@arm.com> 1562689802 +0100
committer Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> 1564645826 +0200

Check architectural bound for max record payload len in one place

The previous code performed architectural maximum record length checks
both before and after record decryption. Since MBEDTLS_SSL_IN_CONTENT_LEN
bounds the maximum length of the record plaintext, it suffices to check
only once after (potential) decryption.

This must not be confused with the internal check that the record
length is small enough to make the record fit into the internal input
buffer; this is done in mbedtls_ssl_fetch_input().