Zero the premaster secret after deriving the master secret in DH

[openssl.git] / ssl / ssl2.h

diff --git a/ssl/ssl2.h b/ssl/ssl2.h
index 01d41c88c57fcb05b55f2475287ae45fa38a1415..f8b56afb6b20ef37a005f975aecbbbbbd3de2997 100644 (file)
--- a/ssl/ssl2.h
+++ b/ssl/ssl2.h
@@ -133,8 +133,12 @@ extern "C" {
 
 /* Upper/Lower Bounds */
 #define SSL2_MAX_MASTER_KEY_LENGTH_IN_BITS     256
-#define SSL2_MAX_RECORD_LENGTH_2_BYTE_HEADER   (unsigned int)32767 
-#define SSL2_MAX_RECORD_LENGTH_3_BYTE_HEADER   16383 /**/
+#ifdef MPE
+#define SSL2_MAX_RECORD_LENGTH_2_BYTE_HEADER   29998u
+#else
+#define SSL2_MAX_RECORD_LENGTH_2_BYTE_HEADER   32767u  /* 2^15-1 */
+#endif
+#define SSL2_MAX_RECORD_LENGTH_3_BYTE_HEADER   16383 /* 2^14-1 */
 
 #define SSL2_CHALLENGE_LENGTH  16
 /*#define SSL2_CHALLENGE_LENGTH        32 */