wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Additional CVE-2014-0224 protection.

Browse source 
Return a fatal error if an attempt is made to use a zero length
master secret.
This commit is contained in:
Dr. Stephen Henson 2014-05-16 12:55:16 +01:00
parent 410a49a4fa
commit 897169fdf0
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
ssl/s3_pkt.c
View file

@ -1306,7 +1306,7 @@ int ssl3_do_change_cipher_spec(SSL *s)
if (s->s3->tmp.key_block == NULL)
{
if (s->session == NULL)
if (s->session == NULL || s->session->master_key_length == 0)
{
/* might happen if dtls1_read_bytes() calls this */
SSLerr(SSL_F_SSL3_DO_CHANGE_CIPHER_SPEC,SSL_R_CCS_RECEIVED_EARLY);