| commit | c46ecc3a55bcbbe4ff31da3864d015e343b0189f | [log] [tgz] |
|---|---|---|
| author | Dr. Stephen Henson <steve@openssl.org> | Thu May 10 16:03:52 2012 +0000 |
| committer | Dr. Stephen Henson <steve@openssl.org> | Thu May 10 16:03:52 2012 +0000 |
| tree | 9596e19677fc82e9605006d8f35320bfd32ec52d | |
| parent | 7388b43cae035484036f5dc46c231ce6282a1367 [diff] |
Sanity check record length before skipping explicit IV in TLS 1.2, 1.1 and DTLS to fix DoS attack. Thanks to Codenomicon for discovering this issue using Fuzz-o-Matic fuzzing as a service testing platform. (CVE-2012-2333)