Without this, there was unexpected behavior. This use-case did never
happen because the cookie had always the length of 0 as default.
--
Index: ssl/t1_lib.c
===================================================================
RCS file: /v/openssl/cvs/openssl/ssl/t1_lib.c,v
retrieving revision 1.58
diff -u -r1.58 t1_lib.c
--- ssl/t1_lib.c 3 Sep 2008 22:17:11 -0000 1.58
+++ ssl/t1_lib.c 15 Sep 2008 11:34:46 -0000
@@ -1399,6 +1399,12 @@
return 1;
if (p >= limit)
return -1;
+ /* Skip DTLSv1 cookie */
+ if (s->version == DTLS1_VERSION)
+ {
+ i = *(p++);
+ p += i;
+ }
/* Skip past cipher list */
n2s(p, i);
p+= i;
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [email protected]
Automated List Manager [EMAIL PROTECTED]