]> CyberLeo.Net >> Repos - FreeBSD/stable/9.git/commit
Backport OpenSSL commit af58be768ebb690f78530f796e92b8ae5c9a4401:
authordelphij <delphij@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Wed, 2 Nov 2016 07:09:31 +0000 (07:09 +0000)
committerdelphij <delphij@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Wed, 2 Nov 2016 07:09:31 +0000 (07:09 +0000)
commit6f14fd2bda6eadfccd084ca4a31173c962ef6e06
tree3790156493f3abe3fe2aba9125ce1b25d5cc48a9
parent68fc2959b4aa57cb6fe3f0139fff38b432395bde
Backport OpenSSL commit af58be768ebb690f78530f796e92b8ae5c9a4401:

  Don't allow too many consecutive warning alerts

  Certain warning alerts are ignored if they are received. This can mean that
  no progress will be made if one peer continually sends those warning alerts.
  Implement a count so that we abort the connection if we receive too many.

  Issue reported by Shi Lei.

This is a direct commit to stable/10 and stable/9.

Security: CVE-2016-8610

git-svn-id: svn://svn.freebsd.org/base/stable/9@308200 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
crypto/openssl/ssl/d1_pkt.c
crypto/openssl/ssl/s3_pkt.c
crypto/openssl/ssl/ssl.h
crypto/openssl/ssl/ssl3.h
crypto/openssl/ssl/ssl_locl.h