diff options
| author | jow <jow@3c298f89-4303-0410-b956-a3cf2f4a3e73> | 2010-03-29 23:14:47 +0000 |
|---|---|---|
| committer | jow <jow@3c298f89-4303-0410-b956-a3cf2f4a3e73> | 2010-03-29 23:14:47 +0000 |
| commit | bdaa1830146059a3d43d2e45a3620641ea28794a (patch) | |
| tree | 35b5d95533a3d9ed442b56e8fe66ec4338a63ab9 /package/openssl/patches/400-cve-2010-0740.patch | |
| parent | 52fc6ae252b1d2812d889824df99f243fc73dbb7 (diff) | |
[package] openssl: add patch for CVE-2010-0740 ("Record of death") vulnerability
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@20592 3c298f89-4303-0410-b956-a3cf2f4a3e73
Diffstat (limited to 'package/openssl/patches/400-cve-2010-0740.patch')
| -rw-r--r-- | package/openssl/patches/400-cve-2010-0740.patch | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/package/openssl/patches/400-cve-2010-0740.patch b/package/openssl/patches/400-cve-2010-0740.patch new file mode 100644 index 0000000000..4c893eb38d --- /dev/null +++ b/package/openssl/patches/400-cve-2010-0740.patch @@ -0,0 +1,15 @@ +--- a/ssl/s3_pkt.c ++++ b/ssl/s3_pkt.c +@@ -291,9 +291,9 @@ again: + if (version != s->version) + { + SSLerr(SSL_F_SSL3_GET_RECORD,SSL_R_WRONG_VERSION_NUMBER); +- /* Send back error using their +- * version number :-) */ +- s->version=version; ++ if ((s->version & 0xFF00) == (version & 0xFF00)) ++ /* Send back error using their minor version number :-) */ ++ s->version = (unsigned short)version; + al=SSL_AD_PROTOCOL_VERSION; + goto f_err; + } |