Only insert small fragments for application records. Handshakes would

only be affected if the attacker can modify the handshake messages, which
seems fairly unlikely, and some implementations are known to be unhappy
with fragmented handshakes.

1 files changed, 1 insertions, 1 deletions

diff --git a/src/tls/rec_wri.cpp b/src/tls/rec_wri.cpp
index 336c18ab4..d372475d6 100644
--- a/src/tls/rec_wri.cpp
+++ b/src/tls/rec_wri.cpp
@@ -145,7 +145,7 @@ void Record_Writer::send(byte type, const byte input[], size_t length)
    *
    * See http://www.openssl.org/~bodo/tls-cbc.txt for background.
    */
-   if((block_size > 0) && (iv_size == 0))
+   if((type == APPLICATION) && (block_size > 0) && (iv_size == 0))
       {
       send_record(type, &input[0], 1);
       input += 1;