Dear all, I have looked at the patch provided by Daniel. All suggested changes are OK, but there are two additional things which should be fixed:
1. In ssl3_read_n() the argument max is overwritten before used. 2. If additional data is behind a valid DTLS record in the UDP packet, it is read as an additional record instead of being discarded. I have added fixes for the above problems to Daniel's patch (and cleaned up some parentheses/whitespaces) and I'm attaching that patch. It should be included in 1.0.0 and 0.9.8. Best regards Michael
dtls.patch
Description: Binary data