Send only one byte of data in the first CBC encrypted aplication data

net/third_party/nss/README.chromium

 Name: Network Security Services (NSS)
 URL: http://www.mozilla.org/projects/security/pki/nss/
 
 This directory includes a copy of NSS's libssl from the CVS repo at:
   :pserver:anonymous@cvs-mirror.mozilla.org:/cvsroot
 
 The snapshot was updated to the CVS tag: NSS_3_12_9_RTM
 
 Patches:
 
@@ skipping 33 matching lines @@
     https://bugzilla.mozilla.org/show_bug.cgi?id=616757
 
   * Add support for TLS cached info extension.
     patches/cachedinfo.patch
     https://bugzilla.mozilla.org/show_bug.cgi?id=665739
 
   * Add a function to export whether the last handshake on a socket resumed a
     previous session.
     patches/didhandshakeresume.patch
 
+  * Start each set of CBC encrypted application data records, resulting from
+    a single call to ssl3_SendApplicationData, with a one-byte application
+    data record in order to randomize the IV in a backward compatible manner.
+    https://bugzilla.mozilla.org/show_bug.cgi?id=665814
+    patches/cbcrandomiv.patch
+
   * Support origin bound certificates.
     http://balfanz.github.com/tls-obc-spec/draft-balfanz-tls-obc-00.txt
     patches/origin_bound_certs.patch
 
   * Add a function to implement RFC 5705: Keying Material Exporters for TLS
     This is a reworked version of the patch from
     https://bugzilla.mozilla.org/show_bug.cgi?id=507359
     patches/secret_exporter.patch
 
   * Send saved write data in the SSL socket in SSL_ForceHandshake.
     patches/handshakeshortwrite.patch
     https://bugzilla.mozilla.org/show_bug.cgi?id=676729
 
 Apply the patches to NSS by running the patches/applypatches.sh script.  Read
 the comments at the top of patches/applypatches.sh for instructions.
 
 The ssl/bodge directory contains files taken from the NSS repo that we required
 for building libssl outside of its usual build environment.