+ if (SSL_IS_TLS13(s) && s->enc_read_ctx != NULL) {
+ size_t end;
+
+ if (rr[j].length == 0) {
+ al = SSL_AD_UNEXPECTED_MESSAGE;
+ SSLerr(SSL_F_SSL3_GET_RECORD, SSL_R_BAD_RECORD_TYPE);
+ goto f_err;
+ }
+
+ /* Strip trailing padding */
+ for (end = rr[j].length - 1; end > 0 && rr[j].data[end] == 0; end--)
+ continue;
+
+ rr[j].length = end;
+ rr[j].type = rr[j].data[end];
+ if (rr[j].type != SSL3_RT_APPLICATION_DATA
+ && rr[j].type != SSL3_RT_ALERT
+ && rr[j].type != SSL3_RT_HANDSHAKE) {
+ al = SSL_AD_UNEXPECTED_MESSAGE;
+ SSLerr(SSL_F_SSL3_GET_RECORD, SSL_R_BAD_RECORD_TYPE);
+ goto f_err;
+ }
+ }
+