Index: net/third_party/nss/ssl/ssl3con.c |
diff --git a/net/third_party/nss/ssl/ssl3con.c b/net/third_party/nss/ssl/ssl3con.c |
index c2d9eeb4ec2a55617ead4ece7bfdda072b529004..ffc04df42f1bf17dae1ee442b2498d3e1955451f 100644 |
--- a/net/third_party/nss/ssl/ssl3con.c |
+++ b/net/third_party/nss/ssl/ssl3con.c |
@@ -10712,7 +10712,7 @@ ssl3_SendEncryptedExtensions(sslSocket *ss) |
spki = SECKEY_EncodeDERSubjectPublicKeyInfo(ss->ssl3.channelIDPub); |
if (spki->len != sizeof(P256_SPKI_PREFIX) + CHANNEL_ID_PUBLIC_KEY_LENGTH || |
- memcmp(spki->data, P256_SPKI_PREFIX, sizeof(P256_SPKI_PREFIX) != 0)) { |
wtc
2013/12/03 01:27:33
So we were comparing only one byte :-(
|
+ memcmp(spki->data, P256_SPKI_PREFIX, sizeof(P256_SPKI_PREFIX)) != 0) { |
PORT_SetError(SSL_ERROR_INVALID_CHANNEL_ID_KEY); |
rv = SECFailure; |
goto loser; |