Re: Issue with dtls1_clear changes from issue #2506

2011-09-19 Thread Michael Tuexen
On Sep 16, 2011, at 12:51 PM, Paul Witty wrote: On 15/09/11 18:12, Michael Tuexen wrote: Hi Paul, I think this is what Robin found. Could you give the patch provided by Robin in http://rt.openssl.org/Ticket/Display.html?id=2602 a try? It should fix your issue. It does indeed; the code

Re: Issue with dtls1_clear changes from issue #2506

2011-09-16 Thread Michael Tuexen
On Sep 15, 2011, at 6:57 PM, Paul Witty wrote: The code which reproduces the crash (not necessarily minimal): SSL_CTX * dtls_context = SSL_CTX_new(DTLSv1_method()); SSL_CTX_set_read_ahead(dtls_context, 1); SSL_CTX_set_cipher_list(dtls_context, DEFAULT:!LOW:!EXP:!MD5);

Re: Issue with dtls1_clear changes from issue #2506

2011-09-16 Thread Paul Witty
On 15/09/11 18:12, Michael Tuexen wrote: Hi Paul, I think this is what Robin found. Could you give the patch provided by Robin in http://rt.openssl.org/Ticket/Display.html?id=2602 a try? It should fix your issue. It does indeed; the code to reproduce is for informational purposes only, as you

Re: Issue with dtls1_clear changes from issue #2506

2011-09-15 Thread Paul Witty
The code which reproduces the crash (not necessarily minimal): SSL_CTX * dtls_context = SSL_CTX_new(DTLSv1_method()); SSL_CTX_set_read_ahead(dtls_context, 1); SSL_CTX_set_cipher_list(dtls_context, DEFAULT:!LOW:!EXP:!MD5); SSL_CTX_set_options(dtls_context, SSL_OP_NO_TICKET); SSL * client_ssl =

Re: Issue with dtls1_clear changes from issue #2506

2011-09-12 Thread Robin Seggelmann
Hi Paul, On Sep 9, 2011, at 4:56 PM, Paul Witty wrote: Since updating to OpenSSL 1.0.0e from 1.0.0d, I've been suffering a crash when connecting with DTLS. I've tracked this down to trying to perform a memcpy of (unsigned int)-13 in do_dtls1_write (where a length of -13 is passed all the

Re: Issue with dtls1_clear changes from issue #2506

2011-09-10 Thread Michael Tüxen
On Sep 9, 2011, at 4:56 PM, Paul Witty wrote: Hi, Since updating to OpenSSL 1.0.0e from 1.0.0d, I've been suffering a crash when connecting with DTLS. I've tracked this down to trying to perform a memcpy of (unsigned int)-13 in do_dtls1_write (where a length of -13 is passed all the way