summaryrefslogtreecommitdiffstats
path: root/package/openssl/openssl-CVE-2009-1379.patch
diff options
context:
space:
mode:
authorGustavo Zacarias <gustavo@zacarias.com.ar>2009-11-10 13:42:35 -0300
committerPeter Korsgaard <jacmet@sunsite.dk>2009-11-15 23:58:50 +0100
commit48ed49e91d2e5e8b73a7392296f6ef5622a27e11 (patch)
treedfda80a27202fc508a9641089ea55ddc3d52acd3 /package/openssl/openssl-CVE-2009-1379.patch
parent882e137608e2727f485014286bad6cdddc31a198 (diff)
downloadbuildroot-novena-48ed49e91d2e5e8b73a7392296f6ef5622a27e11.tar.gz
buildroot-novena-48ed49e91d2e5e8b73a7392296f6ef5622a27e11.zip
openssl: bump to 0.9.8l + security fixes
Closes #703 Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
Diffstat (limited to 'package/openssl/openssl-CVE-2009-1379.patch')
-rw-r--r--package/openssl/openssl-CVE-2009-1379.patch20
1 files changed, 20 insertions, 0 deletions
diff --git a/package/openssl/openssl-CVE-2009-1379.patch b/package/openssl/openssl-CVE-2009-1379.patch
new file mode 100644
index 000000000..e4e05f116
--- /dev/null
+++ b/package/openssl/openssl-CVE-2009-1379.patch
@@ -0,0 +1,20 @@
+diff -Nura openssl-0.9.8l/ssl/d1_both.c openssl-0.9.8l-CVE-2009-1379/ssl/d1_both.c
+--- openssl-0.9.8l/ssl/d1_both.c 2007-10-17 18:17:49.000000000 -0300
++++ openssl-0.9.8l-CVE-2009-1379/ssl/d1_both.c 2009-11-10 13:36:55.000000000 -0300
+@@ -519,6 +519,7 @@
+
+ if ( s->d1->handshake_read_seq == frag->msg_header.seq)
+ {
++ unsigned long frag_len = frag->msg_header.frag_len;
+ pqueue_pop(s->d1->buffered_messages);
+
+ al=dtls1_preprocess_fragment(s,&frag->msg_header,max);
+@@ -536,7 +537,7 @@
+ if (al==0)
+ {
+ *ok = 1;
+- return frag->msg_header.frag_len;
++ return frag_len;
+ }
+
+ ssl3_send_alert(s,SSL3_AL_FATAL,al);