Fill the TLS padding extension with zero bytes instead of spaces.

net/third_party/nss/patches/paddingextension.patch

 diff --git a/nss/lib/ssl/ssl3con.c b/nss/lib/ssl/ssl3con.c
 index 8b8b758..882e356 100644
 --- a/nss/lib/ssl/ssl3con.c
 +++ b/nss/lib/ssl/ssl3con.c
 @@ -4975,6 +4975,7 @@ ssl3_SendClientHello(sslSocket *ss, PRBool resending)
      PRBool           isTLS = PR_FALSE;
      PRBool           requestingResume = PR_FALSE;
      PRInt32          total_exten_len = 0;
 +    unsigned         paddingExtensionLen;
      unsigned         numCompressionMethods;
@@ skipping 82 matching lines @@
 +       extensionLen > maxBytes ||
 +       paddingLen > sizeof(padding)) {
 +       PORT_Assert(0);
 +       return -1;
 +    }
 +
 +    if (SECSuccess != ssl3_AppendHandshakeNumber(ss, ssl_padding_xtn, 2))
 +       return -1;
 +    if (SECSuccess != ssl3_AppendHandshakeNumber(ss, paddingLen, 2))
 +       return -1;
-+    memset(padding, ' ', paddingLen);
++    memset(padding, 0, paddingLen);
 +    if (SECSuccess != ssl3_AppendHandshake(ss, padding, paddingLen))
 +       return -1;
 +
 +    return extensionLen;
 +}
 diff --git a/nss/lib/ssl/sslimpl.h b/nss/lib/ssl/sslimpl.h
 index 614eed1..9c789bf 100644
 --- a/nss/lib/ssl/sslimpl.h
 +++ b/nss/lib/ssl/sslimpl.h
 @@ -237,6 +237,13 @@ extern PRInt32
@@ skipping 19 matching lines @@
      ssl_next_proto_nego_xtn          = 13172,
      ssl_channel_id_xtn               = 30031,
 +    ssl_padding_xtn                  = 35655,
      ssl_renegotiation_info_xtn       = 0xff01  /* experimental number */
  } SSLExtensionType;
  
 -#define SSL_MAX_EXTENSIONS             11
 +#define SSL_MAX_EXTENSIONS             11 /* doesn't include ssl_padding_xtn. */
  
  #endif /* __sslt_h_ */