projects / openwrt / staging / chunkeey.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ff1b163) | patch
cyassl: add a patch to better check legacy SSLv2 client hello records
authorJo-Philipp Wich <jow@openwrt.org>
Tue, 9 Oct 2012 16:41:36 +0000 (16:41 +0000)
committerJo-Philipp Wich <jow@openwrt.org>
Tue, 9 Oct 2012 16:41:36 +0000 (16:41 +0000)
commit6945d722e682c0a1e5986f8844ad4428c7f97aea
tree357c2fe58daafb8d36dfd4d98d1c921eba4ad60ctree | snapshot
parentff1b1635401fab42d6b1df1992f95bcb779c8bfbcommit | diff
cyassl: add a patch to better check legacy SSLv2 client hello records

If junk data is received during SSL_accept(), cyassl will treat it as legacy SSLv2
record without performing further plausibility checks. Change the legacy code path
to return UNKNOWN_HANDSHAKE_TYPE if the value of the third byte isn't 0x01 the
hello message type.

SVN-Revision: 33675
package/libs/cyassl/Makefile diff | blob | history
package/libs/cyassl/patches/200-SSL_accept-handle-hello-garbage.patch [new file with mode: 0644] blob
Staging tree of Christian Lamparter