openwrt-barrierbreaker/package/libs/cyassl/patches/200-SSL_accept-handle-hello-garbage.patch
cyrus ddd71e733d cyassl: update to 3.1.0
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42064 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-08-08 05:26:21 +00:00

13 lines
581 B
Diff

--- a/src/internal.c
+++ b/src/internal.c
@@ -5600,6 +5600,10 @@ int ProcessReply(CYASSL* ssl)
b1 =
ssl->buffers.inputBuffer.buffer[ssl->buffers.inputBuffer.idx++];
ssl->curSize = (word16)(((b0 & 0x7f) << 8) | b1);
+
+ /* does not appear to a be a SSLv2 client hello */
+ if ( ssl->buffers.inputBuffer.buffer[ssl->buffers.inputBuffer.idx] != 1 )
+ return UNKNOWN_HANDSHAKE_TYPE;
}
else {
ssl->options.processReply = getRecordLayerHeader;