[openssl/openssl] ddc36f: tls_common.c: prevent max_early_data overflow in r...

[Abel Thomas]

Branch: refs/heads/openssl-3.5
Home: https://github.com/openssl/openssl
Commit: ddc36ff2a1b9628515a103f4439b2a7a571ef315
https://github.com/openssl/openssl/commit/ddc36ff2a1b9628515a103f4439b2a7a571ef315
Author: Abel Tom <abeltom...@gmail.com>
Date: 2026-06-22 (Mon, 22 Jun 2026)

Changed paths:
M ssl/record/methods/tls_common.c

Log Message:
-----------
tls_common.c: prevent max_early_data overflow in rlayer_early_data_count_ok()

Make the local max_early_data variable uint64_t so an overflow
cannot occur if the max_early_data field in the record layer struct
has the maximum value: UNT32_MAX (0xFFFFFFFF).

Resolves: https://github.com/openssl/openssl/issues/31533

Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Frederik Wedel-Heinen <fwh.o...@gmail.com>
Reviewed-by: Tim Hudson <t...@openssl.org>
MergeDate: Sun Jun 21 23:50:02 2026
(Merged from https://github.com/openssl/openssl/pull/31538)

(cherry picked from commit d41a9225196be4863e7b72a152769a93f9faf917)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications