Jo-Philipp Wich 6945d722e6 cyassl: add a patch to better check legacy SSLv2 client hello records ...

If junk data is received during SSL_accept(), cyassl will treat it as legacy SSLv2
record without performing further plausibility checks. Change the legacy code path
to return UNKNOWN_HANDSHAKE_TYPE if the value of the third byte isn't 0x01 the
hello message type.

SVN-Revision: 33675

2012-10-09 16:41:36 +00:00

..

patches

cyassl: add a patch to better check legacy SSLv2 client hello records

2012-10-09 16:41:36 +00:00

Makefile

cyassl: add a patch to better check legacy SSLv2 client hello records

2012-10-09 16:41:36 +00:00