CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/09/19 10:06:42
Modified files:
lib/libssl : d1_lib.c d1_pkt.c dtls_local.h
Log message:
Remove DTLS unprocessed records queue.
This queue exists to buffer records from the next epoch, which contain
either handshake messages or alerts. This largely means that we are
buffering a Finished message either due to a ChangeCipherSpec message
being dropped or delivered out of order. In the dropped case we have
to rely on the sender retransmitting the flight, which will also
retransmit the Finished message. This can also be used to handle the
out of order case. Both of these messages are small and may even be
included in the same UDP datagram.
Remove the queue since this avoids a bunch of complexity and a
potential DoS vector. BoringSSL did the same a long time ago.
ok kenjiro@ joshua@ beck@
