OLD | NEW |
1 diff --git a/nss/lib/ssl/ssl3ext.c b/nss/lib/ssl/ssl3ext.c | 1 diff -pu a/nss/lib/ssl/ssl3ext.c b/nss/lib/ssl/ssl3ext.c |
2 index cdebcc9..03cf05c 100644 | 2 --- a/nss/lib/ssl/ssl3ext.c» 2014-01-03 19:03:55.557150476 -0800 |
3 --- a/nss/lib/ssl/ssl3ext.c | 3 +++ b/nss/lib/ssl/ssl3ext.c» 2014-01-03 19:04:04.597298171 -0800 |
4 +++ b/nss/lib/ssl/ssl3ext.c | 4 @@ -2324,7 +2324,11 @@ ssl3_CalculatePaddingExtensionLength(uns |
5 @@ -2306,7 +2306,11 @@ ssl3_CalculatePaddingExtensionLength(unsigned int clientH
elloLength) | |
6 clientHelloLength; | 5 clientHelloLength; |
7 unsigned int extensionLength; | 6 unsigned int extensionLength; |
8 | 7 |
9 - if (recordLength < 256 || recordLength >= 512) { | 8 - if (recordLength < 256 || recordLength >= 512) { |
10 + /* This condition should be: | 9 + /* This condition should be: |
11 + * if (recordLength < 256 || recordLength >= 512) { | 10 + * if (recordLength < 256 || recordLength >= 512) { |
12 + * It has been changed, temporarily, to test whether 512 byte ClientHellos | 11 + * It has been changed, temporarily, to test whether 512 byte ClientHellos |
13 + * are a compatibility problem. */ | 12 + * are a compatibility problem. */ |
14 + if (recordLength >= 512) { | 13 + if (recordLength >= 512) { |
15 return 0; | 14 return 0; |
16 } | 15 } |
17 | 16 |
18 @@ -2327,7 +2331,7 @@ ssl3_AppendPaddingExtension(sslSocket *ss, unsigned int ex
tensionLen, | 17 @@ -2345,7 +2349,7 @@ ssl3_AppendPaddingExtension(sslSocket *s |
19 PRUint32 maxBytes) | 18 PRUint32 maxBytes) |
20 { | 19 { |
21 unsigned int paddingLen = extensionLen - 4; | 20 unsigned int paddingLen = extensionLen - 4; |
22 - unsigned char padding[256]; | 21 - unsigned char padding[256]; |
23 + unsigned char padding[512]; | 22 + unsigned char padding[512]; |
24 | 23 |
25 if (extensionLen == 0) { | 24 if (extensionLen == 0) { |
26 return 0; | 25 return 0; |
OLD | NEW |