ttps://dwheeler.com/essays/heartbleed.html">here</a> for more.

<p>
<h2>Task Information</h2>
<p>
We're going re-create the fix in OpenSSL for the Heartbleed vulnerability
by modifying function <tt>dtls1_process_heartbeat</tt>.
<p>
At this point in the code, the construct
<tt>s->s3->rrec.length</tt>
indicates how many bytes are available.
If we don't check for the maximum sizes, we could easily cause
reading beyond a buffer.
Modify the code below in two places to fix this.
<p>
First, modify the code so that