Commit 2f972419 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Add fix for CVE-2013-4353

parent a05a2c67

ssl/s3_both.c

+5 −1
Original line number Diff line number Diff line
@@ -203,7 +203,11 @@ static void ssl3_take_mac(SSL *s) 
	{

	const char *sender;

	int slen;



	/* If no new cipher setup return immediately: other functions will

	 * set the appropriate error.

	 */

	if (s->s3->tmp.new_cipher == NULL)

		return;

	if (s->state & SSL_ST_CONNECT)

		{

		sender=s->method->ssl3_enc->server_finished_label;