Reject zero length TLS records out of hand.

Later checks on the record length in CCS and record handling already
rejected a zero length record but when reading an empty record,
readbuf.size() == TLS_HEADER_SIZE and so creating the pointer
   byte* record_contents = &readbuf[TLS_HEADER_SIZE];
would trigger when running under (at least) GCC'S iterator debugging,
and likely other iterator checkers also.

Since no completely empty record is defined, reject it immediately at
the record layer.

Found by Juraj Somorovsky

Also correct DTLS record handling for large messages: a zero length or
too-long packet should be dropped rather than an exception being thrown.

0 files changed, 0 insertions, 0 deletions