net: don't always add TLS padding.

net/third_party/nss/ssl/ssl3ext.c

Index: net/third_party/nss/ssl/ssl3ext.c
diff --git a/net/third_party/nss/ssl/ssl3ext.c b/net/third_party/nss/ssl/ssl3ext.c
index 6827ee7b3cb06a70d3cbdf52910f8db513bd8f3f..6f3fe2fa65191b6fd667c991e8c2c7df3381e063 100644
--- a/net/third_party/nss/ssl/ssl3ext.c
+++ b/net/third_party/nss/ssl/ssl3ext.c
@@ -2342,11 +2342,7 @@ ssl3_CalculatePaddingExtensionLength(unsigned int clientHelloLength)
 				clientHelloLength;
     unsigned int extensionLength;
 
-    /* This condition should be:
-     *   if (recordLength < 256 || recordLength >= 512) {
-     * It has been changed, temporarily, to test whether 512 byte ClientHellos
-     * are a compatibility problem. */
-    if (recordLength >= 512) {
+    if (recordLength < 256 || recordLength >= 512) {
 	return 0;
     }
 
@@ -2367,7 +2363,7 @@ ssl3_AppendPaddingExtension(sslSocket *ss, unsigned int extensionLen,
 			    PRUint32 maxBytes)
 {
     unsigned int paddingLen = extensionLen - 4;
-    static unsigned char padding[512];
+    static unsigned char padding[256];
 
     if (extensionLen == 0) {
 	return 0;