Don't allow too many consecutive warning alerts
authorMatt Caswell <matt@openssl.org>
Wed, 21 Sep 2016 13:07:31 +0000 (14:07 +0100)
committerMatt Caswell <matt@openssl.org>
Wed, 21 Sep 2016 19:21:57 +0000 (20:21 +0100)
commit6915f39e68f02ad08a635516d46e72bbf0379914
treef90c2e461427d28c14ccb4a5851deecea7de88a6
parente7498968e229a4ec27702a3703826873a279a07b
Don't allow too many consecutive warning alerts

Certain warning alerts are ignored if they are received. This can mean that
no progress will be made if one peer continually sends those warning alerts.
Implement a count so that we abort the connection if we receive too many.

Issue reported by Shi Lei.

Reviewed-by: Rich Salz <rsalz@openssl.org>
(cherry picked from commit af58be768ebb690f78530f796e92b8ae5c9a4401)
include/openssl/ssl.h
ssl/record/rec_layer_d1.c
ssl/record/rec_layer_s3.c
ssl/record/record.h
ssl/record/record_locl.h
ssl/ssl_err.c