97760d5254
Rather than sniff for ClientHello, just fall through to standard logic once weird cases are resolved. This means that garbage will now read as WRONG_VERSION rather than UNKNOWN_PROTOCOL, but the rules here were slightly odd anyway. This also means we'll now accept empty records before the ClientHello (up to the empty record limit), and process records of the wrong type with the usual codepath during the handshake. This shouldn't be any more risk as it just makes the ClientHello more consistent with the rest of the protocol. A TLS implementation that doesn't parse V2ClientHello would do the same unless it still special-cased the first record. All newly-exposed states are reachable by fragmenting ClientHello by one byte and then sending the record in question. BUG=468889 Change-Id: Ib701ae5d8adb663e158c391639b232a9d9cd1c6e Reviewed-on: https://boringssl-review.googlesource.com/5712 Reviewed-by: Adam Langley <agl@google.com> |
||
|---|---|---|
| .. | ||
| alert.go | ||
| cert.pem | ||
| chacha20_poly1305_test.go | ||
| chacha20_poly1305.go | ||
| channel_id_key.pem | ||
| cipher_suites.go | ||
| common.go | ||
| conn.go | ||
| dtls.go | ||
| ecdsa_cert.pem | ||
| ecdsa_key.pem | ||
| handshake_client.go | ||
| handshake_messages.go | ||
| handshake_server.go | ||
| key_agreement.go | ||
| key.pem | ||
| packet_adapter.go | ||
| poly1305.go | ||
| prf.go | ||
| recordingconn.go | ||
| runner.go | ||
| test_output.go | ||
| ticket.go | ||
| tls.go | ||