aboutsummaryrefslogtreecommitdiffstats
path: root/package/libs/cyassl/patches/200-SSL_accept-handle-hello-garbage.patch
blob: 82e08c00d3025ab7dd2dd00eaa4d351996a1ce7a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
--- a/src/internal.c
+++ b/src/internal.c
@@ -5600,6 +5600,10 @@ int ProcessReply(CYASSL* ssl)
                 b1 =
                 ssl->buffers.inputBuffer.buffer[ssl->buffers.inputBuffer.idx++];
                 ssl->curSize = (word16)(((b0 & 0x7f) << 8) | b1);
+
+                /* does not appear to a be a SSLv2 client hello */
+                if ( ssl->buffers.inputBuffer.buffer[ssl->buffers.inputBuffer.idx] != 1 )
+                    return UNKNOWN_HANDSHAKE_TYPE;
             }
             else {
                 ssl->options.processReply = getRecordLayerHeader;