Index: net/third_party/nss/ssl/ssl3con.c |
diff --git a/net/third_party/nss/ssl/ssl3con.c b/net/third_party/nss/ssl/ssl3con.c |
index 567d481203a4e98a3f43f25cb5fdf091445e7e46..882e35690ed6a1dee19b0eec1d2e158fa4bb3a5e 100644 |
--- a/net/third_party/nss/ssl/ssl3con.c |
+++ b/net/third_party/nss/ssl/ssl3con.c |
@@ -5248,7 +5248,7 @@ ssl3_SendClientHello(sslSocket *ss, PRBool resending) |
* in F5 devices. |
* |
* This is not done for DTLS nor for renegotiation. */ |
- if (!IS_DTLS(ss) && !ss->firstHsDone) { |
+ if (!IS_DTLS(ss) && isTLS && !ss->firstHsDone) { |
paddingExtensionLen = ssl3_CalculatePaddingExtensionLength(length); |
total_exten_len += paddingExtensionLen; |
length += paddingExtensionLen; |