wireguard-openbsd/lib/libssl/tls13_buffer.c, branch jd/queueboosts WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/lib/libssl/tls13_buffer.c?h=jd%2Fqueueboosts 2020-03-10T17:11:25Z Add a return value check to tls13_buffer_extend(). 2020-03-10T17:11:25Z jsing jsing@openbsd.org 2020-03-10T17:11:25Z urn:sha1:96130b2dad110fb33dd5f655fc9fd1005d350d6f In the unlikely event that the return value from the read callback is larger than the number of bytes we asked for, we can end up incrementing buf->len beyond capacity. Check the return value from the read callback to prevent this. ok inoguchi@ tb@ Add accessors to change the buffer in a handshake message. 2019-11-20T16:21:20Z beck beck@openbsd.org 2019-11-20T16:21:20Z urn:sha1:7d42f7619b7ab62ae6563e52a49087db702d641f Needed for doing TLS 1.3 Post Handshake Handshake messages. ok jsing@ Provide an extensible buffer implementation that uses a read callback. 2019-01-17T06:32:12Z jsing jsing@openbsd.org 2019-01-17T06:32:12Z urn:sha1:a80e02e19ec4481da9c394e20c725672e6a41eba The read callback returns a TLS13_IO_* value on EOF, failure, want pollin or want pollout, or a positive value indicating the number of bytes read. This will be used by upcoming TLSv1.3 handshake message and record processing code, both of which need the ability to read a fixed size header, before extending the buffer to the number of bytes specified in the header. ok beck@ tb@