When processing ClientHello.cipher_suites, don't ignore cipher suites
authorBodo Moeller <bodo@openssl.org>
Tue, 21 Oct 2014 20:32:30 +0000 (22:32 +0200)
committerBodo Moeller <bodo@openssl.org>
Tue, 21 Oct 2014 20:32:30 +0000 (22:32 +0200)
listed after TLS_FALLBACK_SCSV.

RT: 3575
Reviewed-by: Emilia Kasper <emilia@openssl.org>
ssl/ssl_lib.c

index 3f66fc0..6e35534 100644 (file)
@@ -1507,6 +1507,7 @@ STACK_OF(SSL_CIPHER) *ssl_bytes_to_cipher_list(SSL *s,unsigned char *p,int num,
                                        ssl3_send_alert(s,SSL3_AL_FATAL,SSL_AD_INAPPROPRIATE_FALLBACK);
                                goto err;
                                }
+                       p += n;
                        continue;
                        }