PR: 2778(part)
authorDr. Stephen Henson <steve@openssl.org>
Sat, 31 Mar 2012 18:03:02 +0000 (18:03 +0000)
committerDr. Stephen Henson <steve@openssl.org>
Sat, 31 Mar 2012 18:03:02 +0000 (18:03 +0000)
Submitted by: John Fitzgibbon <john_fitzgibbon@yahoo.com>

Time is always encoded as 4 bytes, not sizeof(Time).

ssl/d1_srvr.c

index e0d9388..7ab9091 100644 (file)
@@ -920,7 +920,7 @@ int dtls1_send_server_hello(SSL *s)
                p=s->s3->server_random;
                Time=(unsigned long)time(NULL);                 /* Time */
                l2n(Time,p);
-               RAND_pseudo_bytes(p,SSL3_RANDOM_SIZE-sizeof(Time));
+               RAND_pseudo_bytes(p,SSL3_RANDOM_SIZE-4);
                /* Do the message type and length last */
                d=p= &(buf[DTLS1_HM_HEADER_LENGTH]);