net: disable 1/n-1 record splitting when False Start is disabled.

net/third_party/nss/ssl/ssl3con.c

 /*
  * SSL3 Protocol
  *
  * ***** BEGIN LICENSE BLOCK *****
  * Version: MPL 1.1/GPL 2.0/LGPL 2.1
  *
  * The contents of this file are subject to the Mozilla Public License Version
  * 1.1 (the "License"); you may not use this file except in compliance with
  * the License. You may obtain a copy of the License at
  * http://www.mozilla.org/MPL/
@@ skipping 2212 matching lines @@
     }
 
     while (nIn > 0) {
         PRUint32  contentLen = PR_MIN(nIn, MAX_FRAGMENT_LENGTH);
         unsigned int spaceNeeded;
         unsigned int numRecords;
 
         ssl_GetSpecReadLock(ss);    /********************************/
 
         if (nIn > 1 &&
+            ss->opt.enableFalseStart == PR_TRUE &&

[wtc, 2011/10/05 15:47:21]

Nit: remove " == PR_TRUE".

[agl, 2011/10/05 16:27:39]

Done and have updated the patch.

             ss->ssl3.cwSpec->version <= SSL_LIBRARY_VERSION_3_1_TLS &&
             type == content_application_data &&
             ss->ssl3.cwSpec->cipher_def->type == type_block /* CBC mode */) {
             /* We will split the first byte of the record into its own record,
              * as explained in the documentation for SSL_CBC_RANDOM_IV in ssl.h
              */
             numRecords = 2;
         } else {
             numRecords = 1;
         }
@@ skipping 7749 matching lines @@
 
     ss->ssl3.initialized = PR_FALSE;
 
     if (ss->ssl3.nextProto.data) {
         PORT_Free(ss->ssl3.nextProto.data);
         ss->ssl3.nextProto.data = NULL;
     }
 }
 
 /* End of ssl3con.c */