Don't advance PACKET in ssl_check_for_safari
authorMatt Caswell <matt@openssl.org>
Wed, 7 Oct 2015 14:20:47 +0000 (15:20 +0100)
committerMatt Caswell <matt@openssl.org>
Wed, 7 Oct 2015 15:17:52 +0000 (16:17 +0100)
commit68a166285102a7cf5dadee763243ae575c5cee77
tree133303c7ba9ace15bab8fcdb617798066f463fba
parent2d2846237364671670c4b9a8415ea957887e1797
Don't advance PACKET in ssl_check_for_safari

The function ssl_check_for_safari fingerprints the incoming extensions
to see whether it is one of the broken versions of safari. However it was
failing to reset the PACKET back to the same position it started in, hence
causing some extensions to be skipped incorrectly.

Reviewed-by: Emilia Käsper <emilia@openssl.org>
ssl/t1_lib.c