DoPayloadRead should ignore PR_END_OF_FILE_ERROR from PR_Read, which...

net/socket/ssl_client_socket_nss.cc

 // Copyright (c) 2006-2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This file includes code GetDefaultCertNickname(), derived from
 // nsNSSCertificate::defaultServerNickName()
 // in mozilla/security/manager/ssl/src/nsNSSCertificate.cpp
 // and SSLClientSocketNSS::DoVerifyCertComplete() derived from
 // AuthCertificateCallback() in
 // mozilla/security/manager/ssl/src/nsNSSCallbacks.cpp.
@@ skipping 938 matching lines @@
   if (rv >= 0) {
     LogData(user_read_buf_->data(), rv);
     LeaveFunction("");
     return rv;
   }
   PRErrorCode prerr = PR_GetError();
   if (prerr == PR_WOULD_BLOCK_ERROR) {
     LeaveFunction("");
     return ERR_IO_PENDING;
   }
+  int net_error;
+  if (prerr == PR_END_OF_FILE_ERROR) {
+    // TODO(wtc): Unless we have received the close_notify alert, we need to
+    // return an error code indicating that the SSL connection ended
+    // uncleanly, a potential truncation attack.  See http://crbug.com/18586.
+    LOG(WARNING) << "SSL connection closed without close_notify";
+    LogData(user_read_buf_->data(), 0);
+    net_error = 0;
+  } else {
+    net_error = NetErrorFromNSPRError(prerr);
+  }
   LeaveFunction("");
-  return NetErrorFromNSPRError(prerr);
+  return net_error;
 }
 
 int SSLClientSocketNSS::DoPayloadWrite() {
   EnterFunction(user_write_buf_len_);
   DCHECK(user_write_buf_);
   int rv = PR_Write(nss_fd_, user_write_buf_->data(), user_write_buf_len_);
   if (rv >= 0) {
     LogData(user_write_buf_->data(), rv);
     LeaveFunction("");
     return rv;
   }
   PRErrorCode prerr = PR_GetError();
   if (prerr == PR_WOULD_BLOCK_ERROR) {
     return ERR_IO_PENDING;
   }
   LeaveFunction("");
   return NetErrorFromNSPRError(prerr);
 }
 
 }  // namespace net