commit 22c51b9a0bfbd85a81bb21cc58f51afd80157244
author Gilles Peskine <Gilles.Peskine@arm.com> Fri Feb 28 22:02:52 2025 +0100
committer Gilles Peskine <Gilles.Peskine@arm.com> Wed Mar 05 17:03:20 2025 +0100
tree 19baf65ee34e409cbf2c2189b4939ee866dc5bbd
parent af0c461f3969a8c51c29cd48b83197250a120c60

mbedtls_ssl_prepare_handshake_record(): log offsets after decryption

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

library/ssl_msg.c

diff --git a/library/ssl_msg.c b/library/ssl_msg.c
index e68474d..9f9cda9 100644
--- a/library/ssl_msg.c
+++ b/library/ssl_msg.c
@@ -3241,6 +3241,14 @@
                               MBEDTLS_PRINTF_SIZET,
                               ssl->in_msglen, ssl->in_msg[0], ssl->in_hslen));
 
+    if (ssl->transform_in != NULL) {
+        MBEDTLS_SSL_DEBUG_MSG(4, ("decrypted handshake message:"
+                                  " iv-buf=%d hdr-buf=%d hdr-buf=%d",
+                                  (int) (ssl->in_iv - ssl->in_buf),
+                                  (int) (ssl->in_hdr - ssl->in_buf),
+                                  (int) (ssl->in_msg - ssl->in_buf)));
+    }
+
 #if defined(MBEDTLS_SSL_PROTO_DTLS)
     if (ssl->conf->transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM) {
         int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;