ssl3_read_bytes bug fix
authorUlf Möller <ulf@openssl.org>
Fri, 28 Dec 2001 17:14:35 +0000 (17:14 +0000)
committerUlf Möller <ulf@openssl.org>
Fri, 28 Dec 2001 17:14:35 +0000 (17:14 +0000)
Submitted by: D P Chang <dpc@qualys.com>
Reviewed by: Bodo

CHANGES
ssl/s3_pkt.c

diff --git a/CHANGES b/CHANGES
index d156f60..8172ffc 100644 (file)
--- a/CHANGES
+++ b/CHANGES
          *) applies to 0.9.6a/0.9.6b/0.9.6c and 0.9.7
          +) applies to 0.9.7 only
 
+  *) Fix ssl3_read_bytes (ssl/s3_pkt.c): To ignore messages of unknown
+     type, we must throw them away by setting rr->length to 0.
+     [D P Chang <dpc@qualys.com>]
+
   -) OpenSSL 0.9.6c released [21 dec 2001]
 
   +) SECURITY: remove unsafe setjmp/signal interaction from ui_openssl.c.
index 3baf6c5..ec4b665 100644 (file)
@@ -1087,6 +1087,7 @@ start:
                /* TLS just ignores unknown message types */
                if (s->version == TLS1_VERSION)
                        {
+                       rr->length = 0;
                        goto start;
                        }
 #endif