Commit 8206dba7 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Clear bytes used for block padding of SSL 3.0 records. (CVE-2011-4576)... 

Clear bytes used for block padding of SSL 3.0 records. (CVE-2011-4576) [include source patch this time!]
parent 528ef878

ssl/s3_enc.c

+3 −0
Original line number Diff line number Diff line
@@ -511,6 +511,9 @@ int ssl3_enc(SSL *s, int send) 


			/* we need to add 'i-1' padding bytes */

			l+=i;

			/* the last of these zero bytes will be overwritten

			 * with the padding length. */

			memset(&rec->input[rec->length], 0, i);

			rec->length+=i;

			rec->input[l-1]=(i-1);

			}