From 5f18fe493ef27da560abdd71f9bc2210d1f64488 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bodo=20M=C3=B6ller?= <bodo@openssl.org>
Date: Mon, 14 Jan 2002 12:42:38 +0000
Subject: [PATCH] Return -1 from ssl3_get_server_done (ssl3/s3_clnt.c) if the
 SSL_R_LENGTH_MISMATCH error is detected.

---
 CHANGES       | 4 ++++
 ssl/s3_clnt.c | 1 +
 2 files changed, 5 insertions(+)

diff --git a/CHANGES b/CHANGES
index 2a2614cfc3..3478df77f2 100644
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,10 @@
 
  Changes between 0.9.6c and 0.9.6d  [XX xxx XXXX]
 
+  *) Bugfix: Return -1 from ssl3_get_server_done (ssl3/s3_clnt.c)
+     if the SSL_R_LENGTH_MISMATCH error is detected.
+     [Geoff Thorpe, Bodo Moeller]
+
   *) New 'shared_ldflag' column in Configure platform table.
      [Richard Levitte]
 
diff --git a/ssl/s3_clnt.c b/ssl/s3_clnt.c
index 4d6da271a8..6d83c57125 100644
--- a/ssl/s3_clnt.c
+++ b/ssl/s3_clnt.c
@@ -1314,6 +1314,7 @@ static int ssl3_get_server_done(SSL *s)
 		/* should contain no data */
 		ssl3_send_alert(s,SSL3_AL_FATAL,SSL_AD_DECODE_ERROR);
 		SSLerr(SSL_F_SSL3_GET_SERVER_DONE,SSL_R_LENGTH_MISMATCH);
+		return -1;
 		}
 	ret=1;
 	return(ret);