tree a60c7739848dd273e0324c6cb8fb2f102707cc1d
parent e0d763c0a49764ce75df710741d6f90a23d584ca
author Rudolf Polzer <rpolzer@google.com> 1779263965 -0700
committer boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com <boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com> 1779344355 -0700

Fix off-by-one allowing an unauthenticated handshake abort.

Not considering a vulnerability as any attacker who can do this can just
as well inject ICMP Destination Unreachable or even just UDP flood the
client. Having said that, definitely an interesting bug.

Change-Id: I7608b38a26abcb41ffccaab453990c066a6a6964
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/95587
Commit-Queue: Rudolf Polzer <rpolzer@google.com>
Reviewed-by: Adam Langley <agl@google.com>
Presubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com <boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com>