aboutsummaryrefslogtreecommitdiffstats
path: root/package/libs/cyassl/patches/200-SSL_accept-handle-hello-garbage.patch
diff options
context:
space:
mode:
authorJo-Philipp Wich <jow@openwrt.org>2012-10-09 16:41:36 +0000
committerJo-Philipp Wich <jow@openwrt.org>2012-10-09 16:41:36 +0000
commit6945d722e682c0a1e5986f8844ad4428c7f97aea (patch)
tree357c2fe58daafb8d36dfd4d98d1c921eba4ad60c /package/libs/cyassl/patches/200-SSL_accept-handle-hello-garbage.patch
parentff1b1635401fab42d6b1df1992f95bcb779c8bfb (diff)
downloadupstream-6945d722e682c0a1e5986f8844ad4428c7f97aea.tar.gz
upstream-6945d722e682c0a1e5986f8844ad4428c7f97aea.tar.bz2
upstream-6945d722e682c0a1e5986f8844ad4428c7f97aea.zip
cyassl: add a patch to better check legacy SSLv2 client hello records
If junk data is received during SSL_accept(), cyassl will treat it as legacy SSLv2 record without performing further plausibility checks. Change the legacy code path to return UNKNOWN_HANDSHAKE_TYPE if the value of the third byte isn't 0x01 the hello message type. SVN-Revision: 33675
Diffstat (limited to 'package/libs/cyassl/patches/200-SSL_accept-handle-hello-garbage.patch')
-rw-r--r--package/libs/cyassl/patches/200-SSL_accept-handle-hello-garbage.patch13
1 files changed, 13 insertions, 0 deletions
diff --git a/package/libs/cyassl/patches/200-SSL_accept-handle-hello-garbage.patch b/package/libs/cyassl/patches/200-SSL_accept-handle-hello-garbage.patch
new file mode 100644
index 0000000000..4a6b8da67e
--- /dev/null
+++ b/package/libs/cyassl/patches/200-SSL_accept-handle-hello-garbage.patch
@@ -0,0 +1,13 @@
+--- a/src/cyassl_int.c
++++ b/src/cyassl_int.c
+@@ -1588,6 +1588,10 @@
+ b1 =
+ ssl->buffers.inputBuffer.buffer[ssl->buffers.inputBuffer.idx++];
+ ssl->curSize = ((b0 & 0x7f) << 8) | b1;
++
++ /* does not appear to a be a SSLv2 client hello */
++ if ( ssl->buffers.inputBuffer.buffer[ssl->buffers.inputBuffer.idx] != 1 )
++ return UNKNOWN_HANDSHAKE_TYPE;
+ }
+ else {
+ ssl->options.processReply = getRecordLayerHeader;