From b16c13ed2fd774b1e93a0165b809fda9376b3fc4 Mon Sep 17 00:00:00 2001
From: markus <>
Date: Tue, 30 Jul 2002 16:00:16 +0000
Subject: sync with http://www.openssl.org/news/patch_20020730_0_9_7.txt (adds
 fix for unused kerberos and engine code, and some more assertions, as well as
 a 64bit integer string fix for conf_mod.c)

---
 src/lib/libssl/s3_clnt.c | 1 +
 1 file changed, 1 insertion(+)

(limited to 'src/lib/libssl/s3_clnt.c')

diff --git a/src/lib/libssl/s3_clnt.c b/src/lib/libssl/s3_clnt.c
index b6be748932..5d3efac2cd 100644
--- a/src/lib/libssl/s3_clnt.c
+++ b/src/lib/libssl/s3_clnt.c
@@ -1597,6 +1597,7 @@ static int ssl3_send_client_key_exchange(SSL *s)
 				SSL_MAX_MASTER_KEY_LENGTH);
 			EVP_EncryptFinal_ex(&ciph_ctx,&(epms[outl]),&padl);
 			outl += padl;
+			die(outl <= sizeof epms);
 			EVP_CIPHER_CTX_cleanup(&ciph_ctx);
 
 			/*  KerberosWrapper.EncryptedPreMasterSecret	*/
-- 
cgit v1.2.3-55-g6feb