Jo-Philipp Wich f7b01c3da2 [package] cyassl: add a patch to better check legacy SSLv2 client hello records ...

If junk data is received during SSL_accept(), cyassl will treat it as legacy SSLv2
record without performing further plausibility checks. Change the legacy code path
to return UNKNOWN_HANDSHAKE_TYPE if the value of the third byte isn't 0x01 the
hello message type.

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@33675 3c298f89-4303-0410-b956-a3cf2f4a3e73

2012-10-09 16:41:36 +00:00

..

patches

[package] cyassl: add a patch to better check legacy SSLv2 client hello records

2012-10-09 16:41:36 +00:00

Makefile

[package] cyassl: add a patch to better check legacy SSLv2 client hello records

2012-10-09 16:41:36 +00:00