Handle app data records from the next epoch
authorMatt Caswell <matt@openssl.org>
Mon, 27 Mar 2023 14:59:41 +0000 (15:59 +0100)
committerMatt Caswell <matt@openssl.org>
Fri, 31 Mar 2023 08:23:26 +0000 (09:23 +0100)
commit88dc59b68cedb303bbac2c52e6ff13f4afef2e09
tree664f3ef3d4565b739c8995bd487f4394738b9e4e
parent57f247cd249755b52f2dbfd3b549a1ef436d5ad8
Handle app data records from the next epoch

It is possible that DTLS records are received out of order such that
records from the next epoch arrive before we have finished processing the
current epoch. We are supposed to buffer such records but for some reason
we only did that for handshake and alert records. This is incorrect since
it is perfectly possible for app data records to arrive early too.

Fixes #20597

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20637)
ssl/record/rec_layer_d1.c