Allow oversized incoming DTLS packets

Bring DTLS into line with everything else, as with commit 0281a8e1db.

Signed-off-by: David Woodhouse <dwmw2@infradead.org>

diff --git a/dtls.c b/dtls.c
index f0a6cb567c8ea8323f2b832aa93eb9e3ad04f523..0ebd639d660daea53688af964a5c4b8ccb2edd75 100644 (file)
--- a/dtls.c
+++ b/dtls.c
@@ -272,7 +272,7 @@ int dtls_mainloop(struct openconnect_info *vpninfo, int *timeout, int readable)
        }
 
        while (readable) {
-               int len = vpninfo->ip_info.mtu;
+               int len = MAX(16384, vpninfo->ip_info.mtu);
                unsigned char *buf;
 
                if (!vpninfo->dtls_pkt) {