commit d84ba7ea23b386f3fe56c4fe7a7aa8ece2e0c356
author Matt Caswell <matt@openssl.org> Thu Jun 12 20:38:45 2014 +0100
committer Matt Caswell <matt@openssl.org> Thu Jun 12 20:40:54 2014 +0100
tree 13a8bf3aa0f2d9761f5074a5a494926bbb7c54d3
parent a50f71868ece56af1be1e37504dc95df7154a90b

Added OPENSSL_assert check as per PR#3377 reported by Rainer Jung <rainer.jung@kippdata.de>

ssl/s3_pkt.c

diff --git a/ssl/s3_pkt.c b/ssl/s3_pkt.c
index fb9720f..02302a5 100644
--- a/ssl/s3_pkt.c
+++ b/ssl/s3_pkt.c
@@ -644,6 +644,7 @@
 	int i;
 
 	s->rwstate=SSL_NOTHING;
+	OPENSSL_assert(s->s3->wnum <= INT_MAX);
 	tot=s->s3->wnum;
 	s->s3->wnum=0;
 
@@ -667,7 +668,7 @@
 	 * buffer ... so we trap and report the error in a way the user
 	 * will notice
 	 */
-	if ( len < tot)
+	if (len < tot)
 		{
 		SSLerr(SSL_F_SSL3_WRITE_BYTES,SSL_R_BAD_LENGTH);
 		return(-1);