Commit a8655eb2 authored by David Woodhouse's avatar David Woodhouse Committed by Dr. Stephen Henson
Browse files

Check DTLS_BAD_VER for version number. 

Need to check DTLS_BAD_VER as well as DTLS1_VERSION.
PR:2984
(cherry picked from commit 6a14feb0)
parent f751dc47

ssl/s3_cbc.c

+1 −1
Original line number Diff line number Diff line
@@ -148,7 +148,7 @@ int tls1_cbc_remove_padding(const SSL* s, 
	unsigned padding_length, good, to_check, i;

	const unsigned overhead = 1 /* padding length byte */ + mac_size;

	/* Check if version requires explicit IV */

	if (s->version == DTLS1_VERSION)

	if (s->version == DTLS1_VERSION || s->version == DTLS1_BAD_VER)

		{

		/* These lengths are all public so we can test them in

		 * non-constant time.