Yoshihiro Kawabe <[EMAIL PROTECTED]>: > I found a small bug in `ssl/s3_both.c'. > > The ssl3_get_message function configured client side (! s->server) > receives SSL3_MT_HELLO_REQUEST (SSLv3 Hello Request), then fall into > eternal loop. > > `do-while loop` between 362 line and 388 line has no condition to > escape from it when receives the SSL3_MT_HELLO_REQUEST message > correctly. [...]
Thanks for the report. Actually the problem has been found before, and is fixed in current snapshots available at <URL:ftp://ftp.openssl.org/snapshot;type=d>. You might want to test a 0.9.6 snapshot as we intend to release 0.9.6c (a bugfix release) soon. -- Bodo M�ller <[EMAIL PROTECTED]> PGP http://www.informatik.tu-darmstadt.de/TI/Mitarbeiter/moeller/0x36d2c658.html * TU Darmstadt, Theoretische Informatik, Alexanderstr. 10, D-64283 Darmstadt * Tel. +49-6151-16-6628, Fax +49-6151-16-6036 ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
