]> CyberLeo.Net >> Repos - FreeBSD/stable/10.git/commit
Backport OpenSSL commit af58be768ebb690f78530f796e92b8ae5c9a4401:
authordelphij <delphij@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Wed, 2 Nov 2016 07:09:31 +0000 (07:09 +0000)
committerdelphij <delphij@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Wed, 2 Nov 2016 07:09:31 +0000 (07:09 +0000)
commit6504a2664d3fa8a490cf252b1e48d7b125a912fb
tree5cca8739187f8c673b933eacfd69fa8bae7bf991
parenta3365280bfee1b3e889e39883d6e8f1101155ea6
Backport OpenSSL commit af58be768ebb690f78530f796e92b8ae5c9a4401:

  Don't allow too many consecutive warning alerts

  Certain warning alerts are ignored if they are received. This can mean that
  no progress will be made if one peer continually sends those warning alerts.
  Implement a count so that we abort the connection if we receive too many.

  Issue reported by Shi Lei.

This is a direct commit to stable/10 and stable/9.

Security: CVE-2016-8610

git-svn-id: svn://svn.freebsd.org/base/stable/10@308200 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
crypto/openssl/ssl/d1_pkt.c
crypto/openssl/ssl/s3_pkt.c
crypto/openssl/ssl/ssl.h
crypto/openssl/ssl/ssl3.h
crypto/openssl/ssl/ssl_locl.h