Search
j0ke.net Open Build Service
>
Projects
>
home:netmax
:
monitoring
>
openssl1
> CVE-2014-0195.patch
Sign Up
|
Log In
Username
Password
Cancel
Overview
Repositories
Revisions
Requests
Users
Advanced
Attributes
Meta
File CVE-2014-0195.patch of Package openssl1
Index: openssl-1.0.1g/ssl/d1_both.c =================================================================== --- openssl-1.0.1g.orig/ssl/d1_both.c +++ openssl-1.0.1g/ssl/d1_both.c @@ -627,7 +627,15 @@ dtls1_reassemble_fragment(SSL *s, struct frag->msg_header.frag_off = 0; } else + { frag = (hm_fragment*) item->data; + if (frag->msg_header.msg_len != msg_hdr->msg_len) + { + item = NULL; + frag = NULL; + goto err; + } + } /* If message is already reassembled, this must be a * retransmit and can be dropped.
