MFC DTLS "Hello Request" fix (CVE-2014-0221)

"Do not recurse when a 'Hello Request' message is received while getting
DTLS fragments. A stream of 'Hello Request' messages will result in
infinite recursion, eventually crashing the DTLS client or server.
Fixes CVE-2014-0221, from OpenSSL.  Reported to OpenSSL by Imre Rad."
From d1_both.c r1.20

1 files changed, 2 insertions, 2 deletions

diff --git a/src/lib/libssl/src/ssl/d1_both.c b/src/lib/libssl/src/ssl/d1_both.c
index e4b718efa7..94ff9a2d14 100644
--- a/src/lib/libssl/src/ssl/d1_both.c
+++ b/src/lib/libssl/src/ssl/d1_both.c
@@ -784,6 +784,7 @@ dtls1_get_message_fragment(SSL *s, int st1, int stn, long max, int *ok)
         int i,al;
         struct hm_header_st msg_hdr;
 
+again:
         /* see if we have the required fragment already */
         if ((frag_len = dtls1_retrieve_buffered_fragment(s,max,ok)) || *ok)
                 {
@@ -842,8 +843,7 @@ dtls1_get_message_fragment(SSL *s, int st1, int stn, long max, int *ok)
                                         s->msg_callback_arg);
                         
                         s->init_num = 0;
-                        return dtls1_get_message_fragment(s, st1, stn,
-                                max, ok);
+                        goto again;
                         }
                 else /* Incorrectly formated Hello request */
                         {