Without this, there was unexpected behavior. This use-case did never
happen because the cookie had always the length of 0 as default.

--
Index: ssl/t1_lib.c
===================================================================
RCS file: /v/openssl/cvs/openssl/ssl/t1_lib.c,v
retrieving revision 1.58
diff -u -r1.58 t1_lib.c
--- ssl/t1_lib.c        3 Sep 2008 22:17:11 -0000       1.58
+++ ssl/t1_lib.c        15 Sep 2008 11:34:46 -0000
@@ -1399,6 +1399,12 @@
                return 1;
        if (p >= limit)
                return -1;
+       /* Skip DTLSv1 cookie */
+       if (s->version == DTLS1_VERSION)
+               {
+               i = *(p++);
+               p += i;
+               }
        /* Skip past cipher list */
        n2s(p, i);
        p+= i;
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to