mirror of
https://github.com/wolfSSL/wolfssl.git
synced 2026-01-28 07:42:21 +01:00
The DTLS sequence number used when decrypting CCM/GCM was taken from the internal state, instead of from the actual message record. If any DTLS messages were dropped, the expectation of the next sequence number was wrong. This lead to a failed MAC check on the next message to arrive, and an alert was generated.