Move the TLSv1.2 record number increment into the new record layer.

This adds checks (based on the TLSv1.3 implementation) to ensure that the
TLS/DTLS sequence numbers do not wrap, as required by the respective RFCs.

ok inoguchi@ tb@

1 files changed, 1 insertions, 12 deletions

diff --git a/src/lib/libssl/t1_enc.c b/src/lib/libssl/t1_enc.c
index b9dcbac661..0ddd52b530 100644
--- a/src/lib/libssl/t1_enc.c
+++ b/src/lib/libssl/t1_enc.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: t1_enc.c,v 1.135 2021/03/24 18:44:00 jsing Exp $ */
+/* $OpenBSD: t1_enc.c,v 1.136 2021/03/29 16:19:15 jsing Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -157,17 +157,6 @@ tls1_cleanup_key_block(SSL *s)
         S3I(s)->hs.tls12.key_block_len = 0;
 }
 
-void
-tls1_record_sequence_increment(unsigned char *seq)
-{
-        int i;
-
-        for (i = SSL3_SEQUENCE_SIZE - 1; i >= 0; i--) {
-                if (++seq[i] != 0)
-                        break;
-        }
-}
-
 /*
  * TLS P_hash() data expansion function - see RFC 5246, section 5.
  */