]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Import DTLS fix from upstream OpenSSL 0.9.8 branch:
authorsimon <simon@FreeBSD.org>
Sun, 23 Aug 2009 14:39:15 +0000 (14:39 +0000)
committersimon <simon@FreeBSD.org>
Sun, 23 Aug 2009 14:39:15 +0000 (14:39 +0000)
commit3bc8c7595d6f805f614ed860868465e3c1d3ee2b
tree04375894d7f18d6e129dcdd750771164a143db08
parentea4cec2e15627b226e7f4f40e2537fa5d05384ba
Import DTLS fix from upstream OpenSSL 0.9.8 branch:

Fix DTLS fragment bug - out-of-sequence message handling which could
result in NULL pointer dereference in
dtls1_process_out_of_seq_message().

Note that this will not get FreeBSD Security Advisory as DTLS is
experimental in OpenSSL.

Security: CVE-2009-1387
Obtained from: OpenSSL CVS
http://cvs.openssl.org/chngview?cn=17958
ssl/d1_both.c