Update to NSS 3.12.9. falsestart.patch, falsestart2.patch, and...

net/third_party/nss/ssl/ssl3gthr.c

 /*
  * Gather (Read) entire SSL3 records from socket into buffer.  
  *
  * ***** BEGIN LICENSE BLOCK *****
  * Version: MPL 1.1/GPL 2.0/LGPL 2.1
  *
  * The contents of this file are subject to the Mozilla Public License Version
  * 1.1 (the "License"); you may not use this file except in compliance with
  * the License. You may obtain a copy of the License at
  * http://www.mozilla.org/MPL/
@@ skipping 18 matching lines @@
  * in which case the provisions of the GPL or the LGPL are applicable instead
  * of those above. If you wish to allow use of your version of this file only
  * under the terms of either the GPL or the LGPL, and not to allow others to
  * use your version of this file under the terms of the MPL, indicate your
  * decision by deleting the provisions above and replace them with the notice
  * and other provisions required by the GPL or the LGPL. If you do not delete
  * the provisions above, a recipient may use your version of this file under
  * the terms of any one of the MPL, the GPL or the LGPL.
  *
  * ***** END LICENSE BLOCK ***** */
-/* $Id: ssl3gthr.c,v 1.9 2008/11/20 07:37:25 nelson%bolyard.com Exp $ */
+/* $Id: ssl3gthr.c,v 1.9.20.1 2010/07/31 04:33:52 wtc%google.com Exp $ */
 
 #include "cert.h"
 #include "ssl.h"
 #include "sslimpl.h"
 #include "ssl3prot.h"
 
 /* 
  * Attempt to read in an entire SSL3 record.
  * Blocks here for blocking sockets, otherwise returns -1 with 
  *      PR_WOULD_BLOCK_ERROR when socket would block.
@@ skipping 143 matching lines @@
     PORT_Assert( ss->opt.noLocks || ssl_HaveRecvBufLock(ss) );
     do {
         /* bring in the next sslv3 record. */
         rv = ssl3_GatherData(ss, &ss->gs, flags);
         if (rv <= 0) {
             return rv;
         }
         
         /* decipher it, and handle it if it's a handshake. 
          * If it's application data, ss->gs.buf will not be empty upon return. 
+         * If it's a change cipher spec, alert, or handshake message,
+         * ss->gs.buf.len will be 0 when ssl3_HandleRecord returns SECSuccess.
          */
         cText.type    = (SSL3ContentType)ss->gs.hdr[0];
         cText.version = (ss->gs.hdr[1] << 8) | ss->gs.hdr[2];
         cText.buf     = &ss->gs.inbuf;
         rv = ssl3_HandleRecord(ss, &cText, &ss->gs.buf);
         if (rv < 0) {
             return ss->recvdCloseNotify ? 0 : rv;
         }
 
         /* If we kicked off a false start in ssl3_HandleServerHelloDone, break
@@ skipping 31 matching lines @@
 {
     int            rv;
 
     PORT_Assert( ss->opt.noLocks || ssl_HaveRecvBufLock(ss) );
     do {
         rv = ssl3_GatherCompleteHandshake(ss, flags);
     } while (rv > 0 && ss->gs.buf.len == 0);
 
     return rv;
 }