)]}'
{
  "commit": "4f36cc932045abfb52997dc024a6d29d2dd5a635",
  "tree": "dbd6059a17c8db2a845aeb605f2e4dbdc36f4b21",
  "parents": [
    "cb744f04f1a8a357a482fc95a74cf852ea183ae8"
  ],
  "author": {
    "name": "Rudolf Polzer",
    "email": "rpolzer@google.com",
    "time": "Fri Oct 17 04:41:44 2025 -0700"
  },
  "committer": {
    "name": "Boringssl LUCI CQ",
    "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Tue Oct 21 11:06:25 2025 -0700"
  },
  "message": "Add an assert for a correct buffer size.\n\nIt is not immediately clear that the memcpy below the added assert is\nvalid and does not access out of bounds. The added assert would hit if\nthe memcpy ever were out of bounds.\n\nThe access is actually safe and the assert will never hit because\nof the \"if (frag_off \u003e msg_len || frag_len \u003e msg_len - frag_off) {\"\ncheck and the fact that dtls1_parse_fragment ensures body\u0027s length\nis exactly frag_len; however this seems rather fragile so I\u0027d still\nlike to have this assert just in case this breaks. Also, this depends\non dtls1_get_incoming_message and dtls_new_incoming_message as well...\njust the fact that a later code change could break this invariant\nseems reason enough to add this assert, and be it just to document the\ninvariant.\n\nFound while auditing use of subspan.\n\nTested: IDA/Diaphora and ghidriff find no differences in generated code\nother than type identifiers with the extra template argument.\n\nChange-Id: I33ceeb559ade726ac9d62495bfe1748c298f5ac1\nBug: 390229582\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/82927\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nAuto-Submit: Rudolf Polzer \u003crpolzer@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "c81e6f56a2ecbc7a03c4750e0d58993ad7758c2b",
      "old_mode": 33188,
      "old_path": "ssl/d1_both.cc",
      "new_id": "ef0a95c8ae6d0d5d5d69900a95e8c0a16c3f6191",
      "new_mode": 33188,
      "new_path": "ssl/d1_both.cc"
    }
  ]
}