Don't resend payload after Snap Start misprediction.

net/third_party/nss/ssl/snapstart.c

 /*
  * TLS Snap Start
  *
  * ***** BEGIN LICENSE BLOCK *****
  * Version: MPL 1.1/GPL 2.0/LGPL 2.1
  *
  * The contents of this file are subject to the Mozilla Public License Version
  * 1.1 (the "License"); you may not use this file except in compliance with
  * the License. You may obtain a copy of the License at
  * http://www.mozilla.org/MPL/
@@ skipping 30 matching lines @@
 /* $Id: ssl3snap.c,v 1.0 2010/08/09 13:00:00 agl%google.com Exp $ */
 
 
 /* TODO(agl): Refactor ssl3_CompressMACEncryptRecord so that it can write to
 ** |sendBuf| directly and fix ssl3_AppendSnapStartHandshakeRecord and
 **  ssl3_AppendSnapStartApplicationData.
 */
 
 /* TODO(agl): Add support for snap starting with compression. */
 
-/* TODO(agl): Free snapStartApplicationData as soon as the handshake has
-** completed.
-*/
-
 #include "pk11pub.h"
 #include "ssl.h"
 #include "sslimpl.h"
 #include "sslproto.h"
 
 static unsigned int GetBE16(const void *in)
 {
     const unsigned char *p = in;
     return ((unsigned) p[0]) << 8 |
                        p[1];
@@ skipping 749 matching lines @@
     rv = ssl3_AppendSnapStartHandshakeRecord(ss, ssl3_SendSnapStartFinished,
                                              PR_TRUE /* encrypt */);
     if (rv != SECSuccess)
         goto loser;
 
     /* Write application data */
     if (ss->ssl3.snapStartApplicationData.data) {
         rv = ssl3_AppendSnapStartApplicationData(
                  ss, ss->ssl3.snapStartApplicationData.data,
                  ss->ssl3.snapStartApplicationData.len);
+        SECITEM_FreeItem(&ss->ssl3.snapStartApplicationData, PR_FALSE);
         if (rv != SECSuccess)
             goto loser;
     }
 
     /* Revert the write cipher spec because the ClientHello will get encrypted
      * with it otherwise. */
     ssl_GetSpecWriteLock(ss);
     temp = ss->ssl3.cwSpec;
     ss->ssl3.cwSpec = ss->ssl3.pwSpec;
     ss->ssl3.pwSpec = temp;
@@ skipping 219 matching lines @@
     if (ss->ssl3.hs.snapStartType == snap_start_full) {
         ss->ssl3.hs.snapStartType = snap_start_recovery;
     } else {
         ss->ssl3.hs.snapStartType = snap_start_resume_recovery;
     }
 
     ssl3_DestroyCipherSpec(ss->ssl3.pwSpec, PR_TRUE/*freeSrvName*/);
 
     return SECSuccess;
 }