Go to file
David Benjamin ddb9f15e18 Reject all invalid records.
The check on the DTLS side was broken anyway. On the TLS side, the spec does
say to ignore them, but there should be no need for this in future-proofing and
NSS doesn't appear to be lenient here. See also
https://boringssl-review.googlesource.com/#/c/3233/

Change-Id: I0846222936c5e08acdcfd9d6f854a99df767e468
Reviewed-on: https://boringssl-review.googlesource.com/3290
Reviewed-by: Adam Langley <agl@google.com>
2015-02-03 21:55:53 +00:00
crypto Don't probe for NEON with SIGILL on aarch64. 2015-02-03 19:56:25 +00:00
doc
include/openssl Simplify DTLS epoch rewind. 2015-02-03 20:34:06 +00:00
ssl Reject all invalid records. 2015-02-03 21:55:53 +00:00
tool Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
util Add unit-tests for PBKDF2. 2015-01-28 20:48:17 +00:00
.clang-format
.gitignore Add generated documentation to .gitignore 2015-01-26 18:37:55 +00:00
BUILDING Honor the standard BUILD_SHARED_LIBS cmake variable. 2015-01-28 20:40:10 +00:00
CMakeLists.txt Enable more warnings & treat warnings as errors on Windows. 2015-01-31 00:18:55 +00:00
codereview.settings
STYLE Add a style guide. 2015-01-28 01:12:05 +00:00