summaryrefslogtreecommitdiff
path: root/openssl0.9.8/patches/CVE-2011-4576.patch
blob: 7e65fdaf963190e14bd0cb680e0fffdaa1779dbe (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
diff --git a/ssl/s3_enc.c b/ssl/s3_enc.c
index 1539a4c..759231d 100644
--- a/ssl/s3_enc.c
+++ b/ssl/s3_enc.c
@@ -479,6 +479,9 @@ int ssl3_enc(SSL *s, int send)
 
 			/* we need to add 'i-1' padding bytes */
 			l+=i;
+			/* the last of these zero bytes will be overwritten
+			 * with the padding length. */
+			memset(&rec->input[rec->length], 0, i);
 			rec->length+=i;
 			rec->input[l-1]=(i-1);
 			}