 Figure 3: A crafted packet sending mismatched size and content  Related code is found in the DTLSCookieManager::ValidateCookie function:  As shown above, although the server checks the “CookieSize” field, the compared length is always *(_DWORD *)(mgr + 16)), whose value is 0x20; however, the real cookie buffer length could be less than 0x20.