openssl/ssl
Matt Caswell 3d004cefec Use the same encryption growth macro consistently
We had two different macros for calculating the potential growth due to
encryption. The macro we use for allocating the underlying buffer should be
the same one that we use for reserving bytes for encryption growth.

Also if we are adding the MAC independently of the cipher algorithm then
the encryption growth will not include that MAC so we should remove it
from the amount of bytes that we reserve for that growth. Otherwise we
might exceed our buffer size and the WPACKET_reserve operation will
fail.

Reviewed-by: Hugo Landau <hlandau@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/19264)
2022-11-14 11:33:47 +00:00
..
record Use the same encryption growth macro consistently 2022-11-14 11:33:47 +00:00
statem Fix typos 2022-11-09 15:30:29 +01:00
bio_ssl.c Fix ssl_free() and thus BIO_free() to respect BIO_NOCLOSE 2021-10-04 10:59:06 +02:00
build.info Do not duplicate symbols between libcrypto and libssl in static builds 2021-06-14 09:21:05 +10:00
d1_lib.c Move e_os.h to include/internal 2022-11-11 10:03:45 +01:00
d1_msg.c
d1_srtp.c
ktls.c Update copyright year 2022-10-11 13:20:27 +01:00
methods.c
pqueue.c
s3_cbc.c fips module header inclusion fine-tunning 2021-07-06 10:52:27 +10:00
s3_enc.c tls: remove TODOs 2021-06-02 16:30:15 +10:00
s3_lib.c Check for EVP_MD being NULL inside ssl. 2022-07-13 08:03:17 +01:00
s3_msg.c Update copyright year 2021-05-20 14:22:33 +01:00
ssl_asn1.c Make the -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION pass tests 2021-08-31 12:20:12 +02:00
ssl_cert.c Add SSL_(CTX_)?get0_(verify|chain)_cert_store functions 2022-04-27 11:18:10 +02:00
ssl_cert_table.h
ssl_ciph.c ssl_cipher_process_rulestr: don't read outside rule_str buffer 2022-10-26 12:49:43 +02:00
ssl_conf.c The -no_legacy_server_connect option applies to client 2022-05-27 08:49:21 +02:00
ssl_err.c err: rename err_load_xxx_strings_int functions 2021-05-26 13:01:47 +10:00
ssl_err_legacy.c Update copyright year 2021-06-17 13:24:59 +01:00
ssl_init.c Move e_os.h to include/internal 2022-11-11 10:03:45 +01:00
ssl_lib.c Move e_os.h to include/internal 2022-11-11 10:03:45 +01:00
ssl_local.h Move e_os.h to include/internal 2022-11-11 10:03:45 +01:00
ssl_mcnf.c
ssl_rsa.c Convert serverinfo in SSL_CTX_use_serverinfo() to v2. 2022-08-26 13:11:01 +10:00
ssl_rsa_legacy.c
ssl_sess.c Free up space in the session cache before adding. 2022-08-01 13:16:14 +02:00
ssl_stat.c Update copyright year 2021-09-07 13:29:33 +02:00
ssl_txt.c Update copyright year 2022-05-03 13:36:42 +01:00
ssl_utst.c
sslerr.h err: rename err_load_xxx_strings_int functions 2021-05-26 13:01:47 +10:00
t1_enc.c Fix check of EVP_CIPHER_CTX_ctrl 2022-05-24 08:58:20 +02:00
t1_lib.c Check that IV length is not less than zero 2022-08-02 14:38:57 +02:00
t1_trce.c
tls13_enc.c ssl_log_secret call in tls13_key_update 2022-09-27 15:56:51 +01:00
tls_depr.c Replace the AES-128-CBC-HMAC-SHA1 cipher in e_ossltest.c 2021-10-11 16:25:17 +02:00
tls_srp.c ssl/tls_srp.c: Add check for BN_dup 2022-07-08 13:11:26 -04:00