We should check the eight bytes starting at p[-9] for rollback attack
authorBodo Möller <bodo@openssl.org>
Thu, 17 Jul 2008 22:11:24 +0000 (22:11 +0000)
committerBodo Möller <bodo@openssl.org>
Thu, 17 Jul 2008 22:11:24 +0000 (22:11 +0000)
commitdf1f7b4b0241ac52f6a67af0521566d857e8f038
tree2b3bb064623bee2b079bfb113cc01052a390bcf8
parent0b7545b239400fe24ab73e9f32f5fde9473fbfcf
We should check the eight bytes starting at p[-9] for rollback attack
detection, or the probability for an erroneous RSA_R_SSLV3_ROLLBACK_ATTACK
will be larger than necessary.

PR: 1695
crypto/rsa/rsa_ssl.c