Commit 006cd708 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Additional CVE-2014-0224 protection. 

Return a fatal error if an attempt is made to use a zero length
master secret.
parent bc8923b1

ssl/s3_pkt.c

+1 −1
Original line number Diff line number Diff line
@@ -1459,7 +1459,7 @@ int ssl3_do_change_cipher_spec(SSL *s) 


	if (s->s3->tmp.key_block == NULL)

		{

		if (s->session == NULL) 

		if (s->session == NULL || s->session->master_key_length == 0)

			{

			/* might happen if dtls1_read_bytes() calls this */

			SSLerr(SSL_F_SSL3_DO_CHANGE_CIPHER_SPEC,SSL_R_CCS_RECEIVED_EARLY);