668005 - Replace SSL_BUFFER_FUDGE with precise length calculations

Status: NEW

Description

[Brian Smith (:briansmith, :bsmith, use NEEDINFO?)]

It isn't clear from reading the code that SSL_BUFFER_FUDGE is sufficiently large, and we must remember to check/update it when we add new algorithms and bulk cipher modes to libssl. The code would be clearer if we had a function or macro that did the calculation explicitly.