Index: net/third_party/nss/ssl/ssl3ext.c |
diff --git a/net/third_party/nss/ssl/ssl3ext.c b/net/third_party/nss/ssl/ssl3ext.c |
index 6827ee7b3cb06a70d3cbdf52910f8db513bd8f3f..6f3fe2fa65191b6fd667c991e8c2c7df3381e063 100644 |
--- a/net/third_party/nss/ssl/ssl3ext.c |
+++ b/net/third_party/nss/ssl/ssl3ext.c |
@@ -2342,11 +2342,7 @@ ssl3_CalculatePaddingExtensionLength(unsigned int clientHelloLength) |
clientHelloLength; |
unsigned int extensionLength; |
- /* This condition should be: |
- * if (recordLength < 256 || recordLength >= 512) { |
- * It has been changed, temporarily, to test whether 512 byte ClientHellos |
- * are a compatibility problem. */ |
- if (recordLength >= 512) { |
+ if (recordLength < 256 || recordLength >= 512) { |
return 0; |
} |
@@ -2367,7 +2363,7 @@ ssl3_AppendPaddingExtension(sslSocket *ss, unsigned int extensionLen, |
PRUint32 maxBytes) |
{ |
unsigned int paddingLen = extensionLen - 4; |
- static unsigned char padding[512]; |
+ static unsigned char padding[256]; |
if (extensionLen == 0) { |
return 0; |