Split RC4-encrypted records.

net/third_party/nss/ssl/sslimpl.h

 /*
  * This file is PRIVATE to SSL and should be the first thing included by
  * any SSL implementation file.
  *
  * This Source Code Form is subject to the terms of the Mozilla Public
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 /* $Id: sslimpl.h,v 1.108 2012/09/28 01:46:45 wtc%google.com Exp $ */
 
 #ifndef __sslimpl_h_
@@ skipping 512 matching lines @@
     PK11SymKey  *write_key;
     PK11SymKey  *write_mac_key;
     PK11Context *write_mac_context;
     SECItem     write_key_item;
     SECItem     write_iv_item;
     SECItem     write_mac_key_item;
     SSL3Opaque  write_iv[MAX_IV_LENGTH];
     PRUint64    cipher_context[MAX_CIPHER_CONTEXT_LLONGS];
 } ssl3KeyMaterial;
 
+/* The number of initial RC4 keystream bytes that have a statistical bias */
+#define SSL3_BIASED_RC4_BYTES 256
+
 /* The DTLS anti-replay window. Defined here because we need it in
  * the cipher spec. Note that this is a ring buffer but left and
  * right represent the true window, with modular arithmetic used to
  * map them onto the buffer.
  */
 #define DTLS_RECVD_RECORDS_WINDOW 1024 /* Packets; approximate
                                         * Must be divisible by 8
                                         */
 typedef struct DTLSRecvdRecordsStr {
     unsigned char data[DTLS_RECVD_RECORDS_WINDOW/8];
@@ skipping 18 matching lines @@
     void *             decodeContext;
     SSLCompressor      compressor;    /* Don't name these fields compress */
     SSLCompressor      decompressor;  /* and uncompress because zconf.h   */
                                       /* may define them as macros.       */ 
     SSLDestroy         destroyCompressContext;
     void *             compressContext;
     SSLDestroy         destroyDecompressContext;
     void *             decompressContext;
     PRBool             bypassCiphers;   /* did double bypass (at least) */
     PK11SymKey *       master_secret;
+    unsigned int       rc4EncryptedBytes;  /* The number of bytes that have
+                                            * been encrypted with RC4.  Stop
+                                            * counting after it exceeds
+                                            * SSL3_BIASED_RC4_BYTES. */
     SSL3SequenceNumber write_seq_num;
     SSL3SequenceNumber read_seq_num;
     SSL3ProtocolVersion version;
     ssl3KeyMaterial    client;
     ssl3KeyMaterial    server;
     SECItem            msItem;
     unsigned char      key_block[NUM_MIXERS * MD5_LENGTH];
     unsigned char      raw_master_secret[56];
     SECItem            srvVirtName;    /* for server: name that was negotiated
                                         * with a client. For client - is
@@ skipping 1293 matching lines @@
 #elif defined(_WIN32_WCE)
 #define SSL_GETPID GetCurrentProcessId
 #elif defined(WIN32)
 extern int __cdecl _getpid(void);
 #define SSL_GETPID _getpid
 #else
 #define SSL_GETPID() 0
 #endif
 
 #endif /* __sslimpl_h_ */