openssl/openssl-CVE-2010-0740.patch
OBS User autobuild 9586798e06 Accepting request 36001 from Base:System
Copy from Base:System/openssl based on submit request 36001 from user msmeissn

OBS-URL: https://build.opensuse.org/request/show/36001
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/openssl?expand=0&rev=32
2010-03-31 17:35:44 +00:00

18 lines
639 B
Diff

Index: openssl-0.9.8m/ssl/s3_pkt.c
===================================================================
--- openssl-0.9.8m.orig/ssl/s3_pkt.c
+++ openssl-0.9.8m/ssl/s3_pkt.c
@@ -291,9 +291,9 @@ again:
if (version != s->version)
{
SSLerr(SSL_F_SSL3_GET_RECORD,SSL_R_WRONG_VERSION_NUMBER);
- /* Send back error using their
- * version number :-) */
- s->version=version;
+ if ((s->version & 0xFF00) == (version & 0xFF00))
+ /* Send back error using their minor version number :-) */
+ s->version = (unsigned short)version;
al=SSL_AD_PROTOCOL_VERSION;
goto f_err;
}