tree e66635fd42bc153488a35e27e6bf414a2ab267bf
parent 2a0c496ab3218d294ab4857811e188dd4c19005d
author David Benjamin <davidben@chromium.org> 1408777991 -0400
committer Adam Langley <agl@google.com> 1409003376 +0000

Fix flipped DTLS checks.

09bd58d1f1c71ed7ea687d0295e23793ad3d98fa flipped a condition. Doing that
memset in the DTLS case breaks retransmits across a CCS and fails to memset in
the TLS case.

Strangely, it didn't break any tests, but I think that's a function of us
lacking renego tests. The sequence number doesn't seem to be used in the
initial handshake for TLS, so it stayed at zero. After a renego, that codepath
is relevant.

Change-Id: I369a524021857a82e181af7798c7a10fe6279550
Reviewed-on: https://boringssl-review.googlesource.com/1601
Reviewed-by: Adam Langley <agl@google.com>