From: Bodo Möller <bodo@openssl.org>
Date: Sun, 14 Apr 2002 13:05:15 +0000 (+0000)
Subject: fix length field we create when converting SSL 2.0 format into SSL 3.0/TLS 1.0 format
X-Git-Tag: OpenSSL_0_9_6d~20^2~19
X-Git-Url: https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff_plain;h=2fb3f002d0f7f0ffe530dffa39df81f75ab08733

fix length field we create when converting SSL 2.0 format into SSL 3.0/TLS 1.0 format
(the bug was introduced with message callback support)
---

diff --git a/ssl/s23_srvr.c b/ssl/s23_srvr.c
index 6170861705..9e89cc7f9a 100644
--- a/ssl/s23_srvr.c
+++ b/ssl/s23_srvr.c
@@ -473,7 +473,7 @@ int ssl23_get_client_hello(SSL *s)
 		*(d++)=1;
 		*(d++)=0;
 		
-		i=(d-(unsigned char *)s->init_buf->data);
+		i = (d-(unsigned char *)s->init_buf->data) - 4;
 		l2n3((long)i, d_len);
 
 		/* get the data reused from the init_buf */