diff options
author | jasper <> | 2010-03-31 12:16:44 +0000 |
---|---|---|
committer | jasper <> | 2010-03-31 12:16:44 +0000 |
commit | b804565a8512a0217788ca5c0705bfc8a07963de (patch) | |
tree | d16653700519f196b1ecb23a95ec63a4ba98992a | |
parent | e00271b737c8f423fd8457b14f7dc2369497a36c (diff) | |
download | openbsd-OPENBSD_4_5.tar.gz openbsd-OPENBSD_4_5.tar.bz2 openbsd-OPENBSD_4_5.zip |
Security fix for CVE-2010-0740OPENBSD_4_5
"In TLS connections, certain incorrectly formatted records can cause an OpenSSL
client or server to crash due to a read attempt at NULL."
http://openssl.org/news/secadv_20100324.txt
ok djm@ sthen@
-rw-r--r-- | src/lib/libssl/src/ssl/s3_pkt.c | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/src/lib/libssl/src/ssl/s3_pkt.c b/src/lib/libssl/src/ssl/s3_pkt.c index b98b84044f..515739c08c 100644 --- a/src/lib/libssl/src/ssl/s3_pkt.c +++ b/src/lib/libssl/src/ssl/s3_pkt.c | |||
@@ -282,9 +282,10 @@ again: | |||
282 | if (version != s->version) | 282 | if (version != s->version) |
283 | { | 283 | { |
284 | SSLerr(SSL_F_SSL3_GET_RECORD,SSL_R_WRONG_VERSION_NUMBER); | 284 | SSLerr(SSL_F_SSL3_GET_RECORD,SSL_R_WRONG_VERSION_NUMBER); |
285 | /* Send back error using their | 285 | if ((s->version & 0xFF00) == (version & 0xFF00)) |
286 | * version number :-) */ | 286 | /* Send back error using their |
287 | s->version=version; | 287 | * minor version number :-) */ |
288 | s->version = (unsigned short)version; | ||
288 | al=SSL_AD_PROTOCOL_VERSION; | 289 | al=SSL_AD_PROTOCOL_VERSION; |
289 | goto f_err; | 290 | goto f_err; |
290 | } | 291 | } |