1
0
mirror of git://projects.qi-hardware.com/openwrt-xburst.git synced 2024-11-28 07:25:19 +02:00
openwrt-xburst/package/openssl/patches/400-cve-2010-0740.patch
jow bdaa183014 [package] openssl: add patch for CVE-2010-0740 ("Record of death") vulnerability
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@20592 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-03-29 23:14:47 +00:00

16 lines
533 B
Diff

--- a/ssl/s3_pkt.c
+++ b/ssl/s3_pkt.c
@@ -291,9 +291,9 @@ again:
if (version != s->version)
{
SSLerr(SSL_F_SSL3_GET_RECORD,SSL_R_WRONG_VERSION_NUMBER);
- /* Send back error using their
- * version number :-) */
- s->version=version;
+ if ((s->version & 0xFF00) == (version & 0xFF00))
+ /* Send back error using their minor version number :-) */
+ s->version = (unsigned short)version;
al=SSL_AD_PROTOCOL_VERSION;
goto f_err;
}