diff options
| author | lloyd <[email protected]> | 2012-09-12 13:57:48 +0000 |
|---|---|---|
| committer | lloyd <[email protected]> | 2012-09-12 13:57:48 +0000 |
| commit | bd209a05a784f74bdeb38a7c93c9ce57977453a0 (patch) | |
| tree | 861a35e740696417b306484ee759c3e1542ade75 /doc/relnotes | |
| parent | 0ed49ddb3090777fad5627b585de407c472725bd (diff) | |
CBC overwrote (encrypted) the following block in write_record. I
missed it before because the buffer was pre-sized to maximum
allowable, thus it just encrypted something we never sent.
However after the buffer sizes were set to zero, it would start
encrypting ... something ... after the block. This would manifest by
strange crashes during a full client renegotiation. The problem was
that the buffer was sized up a bit for sending the unencrypted
messages (client kex, etc) and so we had some wiggle room. However
sending an encrypted client kex took more space than that (due to the
MAC, etc) so a full renegotiation would cause values to be
overwritten.
Diffstat (limited to 'doc/relnotes')
0 files changed, 0 insertions, 0 deletions