diff options
| author | Jonathan Bastien-Filiatrault <joe@x2a.org> | 2010-09-05 01:33:01 -0400 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2011-02-17 22:51:25 +0100 |
| commit | df20b0001d43b2f552858b47ef059af61aea6c45 (patch) | |
| tree | 85fd83ee336f957a91e21ed72181af5a96599384 | |
| parent | af566cf29a1d7e715f1d9f004bbddf412bdc2e67 (diff) | |
| download | gnutls-df20b0001d43b2f552858b47ef059af61aea6c45.tar.gz | |
Decrypt using the proper sequence number.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
| -rw-r--r-- | lib/gnutls_record.c | 10 |
1 files changed, 7 insertions, 3 deletions
diff --git a/lib/gnutls_record.c b/lib/gnutls_record.c index 3186690c70..c831c1872e 100644 --- a/lib/gnutls_record.c +++ b/lib/gnutls_record.c @@ -920,7 +920,8 @@ _gnutls_recv_int (gnutls_session_t session, content_type_t type, { int decrypted_length; opaque version[2]; - uint64 sequence; + uint64 dtls_sequence; + uint64 *decrypt_sequence; content_type_t recv_type; uint16_t length; uint8_t *ciphertext; @@ -1017,7 +1018,7 @@ begin: if ((ret = record_check_headers (session, data_enc.data, type, htype, &recv_type, - version, &sequence, &length, &header_size)) < 0) + version, &dtls_sequence, &length, &header_size)) < 0) { gnutls_assert (); return ret; @@ -1099,11 +1100,14 @@ begin: return ret; } + decrypt_sequence = + _gnutls_is_dtls(session) ? &dtls_sequence : &record_state->sequence_number; + /* decrypt the data we got. */ ret = _gnutls_decrypt (session, ciphertext, length, tmp.data, tmp.size, - recv_type, record_params); + recv_type, record_params, decrypt_sequence); if (ret < 0) { session_unresumable (session); |