)]}'
{
  "commit": "9ac494a171014fa0f06dbf2b0e08abf1d7ec85aa",
  "tree": "3248d7f7e912bc6a5662b91a1660ad53d3818e22",
  "parents": [
    "197a654639aa39a86782b06abebdeccbfa197e2b"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@google.com",
    "time": "Thu Oct 24 12:55:26 2024 -0400"
  },
  "committer": {
    "name": "Boringssl LUCI CQ",
    "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Tue Oct 29 03:18:25 2024 +0000"
  },
  "message": "Remove now redundant check for extra DTLS messages in epoch 1\n\nThis dates to\nhttps://boringssl-review.googlesource.com/c/boringssl/+/8988, which was\nseveral iterations back of the message read API. We now catch extra\nFinished by way of:\n\nIn DTLS 1.2, there is no key change at the end of the handshake:\n\n- If the fragment was received before the handshake was over, we queue\n  it up and then the handshake makes sure incoming messages are clear\n  before completing.\n\n- If the fragment was received after the handshake was over, we reject\n  almost all handshake fragments post-handshake. (This will need to be\n  rejiggered.\n\nIn DTLS 1.3, there is a key change at the end of the handshake\n\n- If the fragment was received before the handshake was over, key\n  changes require incoming messages are clear and we reject it.\n\n- If the fragment was received after the handshake was over, we\n  currently do not notice. We do not retain the old epoch and just drop\n  the record. (This is fine, since we won\u0027t actually process it.) But\n  when we implement DTLS 1.3 key changes properly, we might end up\n  picking it up.\n\nBug: 42290594\nChange-Id: I52621f209321a0eb1ce59aa36db68922206d529f\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/72447\nReviewed-by: Nick Harper \u003cnharper@chromium.org\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "7f077a327ae92dee15733c7cdfe189fa9d9cf1b1",
      "old_mode": 33188,
      "old_path": "ssl/d1_both.cc",
      "new_id": "c460e143ab60120dd43c31cc271db6607ba4eb57",
      "new_mode": 33188,
      "new_path": "ssl/d1_both.cc"
    },
    {
      "type": "modify",
      "old_id": "8a4dd551a3b25ee6903bf6d419cb06ae1f2f3723",
      "old_mode": 33188,
      "old_path": "ssl/test/runner/runner.go",
      "new_id": "4c6590f1da6dbf35cc38dcd34a8eb31f73b00ee8",
      "new_mode": 33188,
      "new_path": "ssl/test/runner/runner.go"
    }
  ]
}