Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Correctly calculate the produced bytes in all cases when calling Refe… #10063

Merged
merged 4 commits into from Feb 27, 2020

Conversation

normanmaurer
Copy link
Member

…renceCountedOpenSslEngine.wrap(...)

Motivation:

We did not correctly account for produced bytes when SSL_write(...) returns -1 in all cases. This could lead to lost data and so a corrupt SSL connection.

Modifications:

Always ensure we calculate the produced bytes correctly

Result:

Fixes #10041

…renceCountedOpenSslEngine.wrap(...)

Motivation:

We did not correctly account for produced bytes when SSL_write(...) returns -1 in all cases. This could lead to lost data and so a corrupt SSL connection.

Modifications:

Always ensure we calculate the produced bytes correctly

Result:

Fixes #10041
@normanmaurer
Copy link
Member Author

I just posted this to give early access. Still working on a test case and so will wait with merging until I have one ready

@normanmaurer normanmaurer added this to the 4.1.46.Final milestone Feb 26, 2020
@normanmaurer normanmaurer self-assigned this Feb 26, 2020
@normanmaurer
Copy link
Member Author

test added...

@normanmaurer normanmaurer merged commit b64abd0 into 4.1 Feb 27, 2020
@normanmaurer normanmaurer deleted the ssl_wrap_bug branch February 27, 2020 07:50
normanmaurer added a commit that referenced this pull request Feb 27, 2020
#10063)

Motivation:

We did not correctly account for produced bytes when SSL_write(...) returns -1 in all cases. This could lead to lost data and so a corrupt SSL connection.

Modifications:

- Always ensure we calculate the produced bytes correctly
- Add unit tests

Result:

Fixes #10041
ihanyong pushed a commit to ihanyong/netty that referenced this pull request Jul 31, 2020
netty#10063)

Motivation:

We did not correctly account for produced bytes when SSL_write(...) returns -1 in all cases. This could lead to lost data and so a corrupt SSL connection.

Modifications:

- Always ensure we calculate the produced bytes correctly
- Add unit tests

Result:

Fixes netty#10041
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

TLSv1.3 can fail with HTTP/2 and Session Tickets Enabled
3 participants