| OLD | NEW |
| 1 diff -pu a/nss/lib/ssl/ssl3ext.c b/nss/lib/ssl/ssl3ext.c | 1 diff -pu a/nss/lib/ssl/ssl3ext.c b/nss/lib/ssl/ssl3ext.c |
| 2 --- a/nss/lib/ssl/ssl3ext.c» 2014-01-03 19:03:55.557150476 -0800 | 2 --- a/nss/lib/ssl/ssl3ext.c» 2014-01-17 17:59:03.242109996 -0800 |
| 3 +++ b/nss/lib/ssl/ssl3ext.c» 2014-01-03 19:04:04.597298171 -0800 | 3 +++ b/nss/lib/ssl/ssl3ext.c» 2014-01-17 18:17:39.630620563 -0800 |
| 4 @@ -2324,7 +2324,11 @@ ssl3_CalculatePaddingExtensionLength(uns | 4 @@ -2332,7 +2332,11 @@ ssl3_CalculatePaddingExtensionLength(uns |
| 5 clientHelloLength; | 5 clientHelloLength; |
| 6 unsigned int extensionLength; | 6 unsigned int extensionLength; |
| 7 | 7 |
| 8 - if (recordLength < 256 || recordLength >= 512) { | 8 - if (recordLength < 256 || recordLength >= 512) { |
| 9 + /* This condition should be: | 9 + /* This condition should be: |
| 10 + * if (recordLength < 256 || recordLength >= 512) { | 10 + * if (recordLength < 256 || recordLength >= 512) { |
| 11 + * It has been changed, temporarily, to test whether 512 byte ClientHellos | 11 + * It has been changed, temporarily, to test whether 512 byte ClientHellos |
| 12 + * are a compatibility problem. */ | 12 + * are a compatibility problem. */ |
| 13 + if (recordLength >= 512) { | 13 + if (recordLength >= 512) { |
| 14 return 0; | 14 return 0; |
| 15 } | 15 } |
| 16 | 16 |
| 17 @@ -2345,7 +2349,7 @@ ssl3_AppendPaddingExtension(sslSocket *s | 17 @@ -2353,7 +2357,7 @@ ssl3_AppendPaddingExtension(sslSocket *s |
| 18 PRUint32 maxBytes) | 18 PRUint32 maxBytes) |
| 19 { | 19 { |
| 20 unsigned int paddingLen = extensionLen - 4; | 20 unsigned int paddingLen = extensionLen - 4; |
| 21 - unsigned char padding[256]; | 21 - static unsigned char padding[256]; |
| 22 + unsigned char padding[512]; | 22 + static unsigned char padding[512]; |
| 23 | 23 |
| 24 if (extensionLen == 0) { | 24 if (extensionLen == 0) { |
| 25 return 0; | 25 return 0; |
| OLD | NEW |