Problem:
SSL_reset_early_data_reject does not clear out unreported bytes written. As a result, after early data is rejected and SSL_reset_early_data_rejected() is called, SSL_write most likely fail with BAD_LENGTH because of false length check.
Solution:
Port boringssl fix https://boringssl.googlesource.com/boringssl/+/b01c5055d9efc6b114d5395ac1cc0080d9941a09
Problem:
SSL_reset_early_data_reject does not clear out unreported bytes written. As a result, after early data is rejected and SSL_reset_early_data_rejected() is called, SSL_write most likely fail with BAD_LENGTH because of false length check.
Solution:
Port boringssl fix https://boringssl.googlesource.com/boringssl/+/b01c5055d9efc6b114d5395ac1cc0080d9941a09