OLD | NEW |
1 diff -pu a/nss/lib/ssl/ssl3ext.c b/nss/lib/ssl/ssl3ext.c | 1 diff -pu a/nss/lib/ssl/ssl3ext.c b/nss/lib/ssl/ssl3ext.c |
2 --- a/nss/lib/ssl/ssl3ext.c» 2014-01-03 19:03:55.557150476 -0800 | 2 --- a/nss/lib/ssl/ssl3ext.c» 2014-01-17 17:59:03.242109996 -0800 |
3 +++ b/nss/lib/ssl/ssl3ext.c» 2014-01-03 19:04:04.597298171 -0800 | 3 +++ b/nss/lib/ssl/ssl3ext.c» 2014-01-17 18:17:39.630620563 -0800 |
4 @@ -2324,7 +2324,11 @@ ssl3_CalculatePaddingExtensionLength(uns | 4 @@ -2332,7 +2332,11 @@ ssl3_CalculatePaddingExtensionLength(uns |
5 clientHelloLength; | 5 clientHelloLength; |
6 unsigned int extensionLength; | 6 unsigned int extensionLength; |
7 | 7 |
8 - if (recordLength < 256 || recordLength >= 512) { | 8 - if (recordLength < 256 || recordLength >= 512) { |
9 + /* This condition should be: | 9 + /* This condition should be: |
10 + * if (recordLength < 256 || recordLength >= 512) { | 10 + * if (recordLength < 256 || recordLength >= 512) { |
11 + * It has been changed, temporarily, to test whether 512 byte ClientHellos | 11 + * It has been changed, temporarily, to test whether 512 byte ClientHellos |
12 + * are a compatibility problem. */ | 12 + * are a compatibility problem. */ |
13 + if (recordLength >= 512) { | 13 + if (recordLength >= 512) { |
14 return 0; | 14 return 0; |
15 } | 15 } |
16 | 16 |
17 @@ -2345,7 +2349,7 @@ ssl3_AppendPaddingExtension(sslSocket *s | 17 @@ -2353,7 +2357,7 @@ ssl3_AppendPaddingExtension(sslSocket *s |
18 PRUint32 maxBytes) | 18 PRUint32 maxBytes) |
19 { | 19 { |
20 unsigned int paddingLen = extensionLen - 4; | 20 unsigned int paddingLen = extensionLen - 4; |
21 - unsigned char padding[256]; | 21 - static unsigned char padding[256]; |
22 + unsigned char padding[512]; | 22 + static unsigned char padding[512]; |
23 | 23 |
24 if (extensionLen == 0) { | 24 if (extensionLen == 0) { |
25 return 0; | 25 return 0; |
OLD | NEW |