| OLD | NEW |
| 1 diff --git a/nss/lib/ssl/ssl3ext.c b/nss/lib/ssl/ssl3ext.c | 1 diff -pu a/nss/lib/ssl/ssl3ext.c b/nss/lib/ssl/ssl3ext.c |
| 2 index cdebcc9..03cf05c 100644 | 2 --- a/nss/lib/ssl/ssl3ext.c» 2014-01-03 19:03:55.557150476 -0800 |
| 3 --- a/nss/lib/ssl/ssl3ext.c | 3 +++ b/nss/lib/ssl/ssl3ext.c» 2014-01-03 19:04:04.597298171 -0800 |
| 4 +++ b/nss/lib/ssl/ssl3ext.c | 4 @@ -2324,7 +2324,11 @@ ssl3_CalculatePaddingExtensionLength(uns |
| 5 @@ -2306,7 +2306,11 @@ ssl3_CalculatePaddingExtensionLength(unsigned int clientH
elloLength) | |
| 6 clientHelloLength; | 5 clientHelloLength; |
| 7 unsigned int extensionLength; | 6 unsigned int extensionLength; |
| 8 | 7 |
| 9 - if (recordLength < 256 || recordLength >= 512) { | 8 - if (recordLength < 256 || recordLength >= 512) { |
| 10 + /* This condition should be: | 9 + /* This condition should be: |
| 11 + * if (recordLength < 256 || recordLength >= 512) { | 10 + * if (recordLength < 256 || recordLength >= 512) { |
| 12 + * It has been changed, temporarily, to test whether 512 byte ClientHellos | 11 + * It has been changed, temporarily, to test whether 512 byte ClientHellos |
| 13 + * are a compatibility problem. */ | 12 + * are a compatibility problem. */ |
| 14 + if (recordLength >= 512) { | 13 + if (recordLength >= 512) { |
| 15 return 0; | 14 return 0; |
| 16 } | 15 } |
| 17 | 16 |
| 18 @@ -2327,7 +2331,7 @@ ssl3_AppendPaddingExtension(sslSocket *ss, unsigned int ex
tensionLen, | 17 @@ -2345,7 +2349,7 @@ ssl3_AppendPaddingExtension(sslSocket *s |
| 19 PRUint32 maxBytes) | 18 PRUint32 maxBytes) |
| 20 { | 19 { |
| 21 unsigned int paddingLen = extensionLen - 4; | 20 unsigned int paddingLen = extensionLen - 4; |
| 22 - unsigned char padding[256]; | 21 - unsigned char padding[256]; |
| 23 + unsigned char padding[512]; | 22 + unsigned char padding[512]; |
| 24 | 23 |
| 25 if (extensionLen == 0) { | 24 if (extensionLen == 0) { |
| 26 return 0; | 25 return 0; |
| OLD | NEW |