blob: d150c8acb7c55e36dc17cf817092539c4ab5a65d (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
|
$NetBSD: patch-bc,v 1.1 2010/03/26 00:20:49 taca Exp $
Fix for CVE-2010-0740: http://www.openssl.org/news/secadv_20100324.txt
--- ssl/s3_pkt.c.orig 2010-01-24 13:52:38.000000000 +0000
+++ ssl/s3_pkt.c
@@ -291,9 +291,9 @@ again:
if (version != s->version)
{
SSLerr(SSL_F_SSL3_GET_RECORD,SSL_R_WRONG_VERSION_NUMBER);
- /* Send back error using their
- * version number :-) */
- s->version=version;
+ if ((s->version & 0xFF00) == (version & 0xFF00))
+ /* Send back error using their minor version number :-) */
+ s->version = (unsigned short)version;
al=SSL_AD_PROTOCOL_VERSION;
goto f_err;
}
|
