openssl/openssl-1.0.0a-CVE-2011-4576.diff

15 lines
450 B
Diff

http://cvs.openssl.org/chngview?cn=21940
--- ssl/s3_enc.c 2009-04-16 17:22:50.000000000 +0000
+++ ssl/s3_enc.c.oden 2012-01-09 14:15:06.000000000 +0000
@@ -512,6 +512,9 @@ int ssl3_enc(SSL *s, int send)
/* we need to add 'i-1' padding bytes */
l+=i;
+ /* the last of these zero bytes will be overwritten
+ * with the padding length. */
+ memset(&rec->input[rec->length], 0, i);
rec->length+=i;
rec->input[l-1]=(i-1);
}