-
Notifications
You must be signed in to change notification settings - Fork 2.8k
TLS 1.3: Enforce max_early_data_size on client #8857
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
TLS 1.3: Enforce max_early_data_size on client #8857
Conversation
mpg
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Mostly minor points, the only important one is about handling errors from ssl_write_real().
Signed-off-by: Ronald Cron <[email protected]>
Signed-off-by: Ronald Cron <[email protected]>
Signed-off-by: Ronald Cron <[email protected]>
Signed-off-by: Ronald Cron <[email protected]>
Signed-off-by: Ronald Cron <[email protected]>
Signed-off-by: Ronald Cron <[email protected]>
2cefacf to
3328d8a
Compare
Allocate the buffer to write/read early data. That way in ASan builds. buffer overwrite/overread can be detected. Signed-off-by: Ronald Cron <[email protected]>
Signed-off-by: Ronald Cron <[email protected]>
3328d8a to
7c07aab
Compare
tom-cosgrove-arm
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I have reviewed the rebase (0ee2e4aae-2cefacfdd became 5c4fc9156-aad852376) and the commits de9b03dcb - 7c07aab72 and I am happy with them. Together with @mpg's review this constitutes one approval for this PR.
waleed-elmelegy-arm
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Manuel's requested changes have been made
61fd13c
|
@tom-cosgrove-arm @waleed-elmelegy-arm following the merge of #8854, this PR had conflicts with development head: test_suite_ssl test cases and test function added at the end of respectively test_suite_ssl.data and test_suite_ssl.function in both PRs. For once I opted for the merge of the development head instead of the rebase to resolve the conflicts. I've done both and resolving the conflicts were easier with the merge. |
tom-cosgrove-arm
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
waleed-elmelegy-arm
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Description
Fix #8611
On top of #8760, only the last 4 commits belong to this PR.
PR checklist