[Pkg-openssl-changes] r414 - in openssl/branches/etch: debian ssl
Kurt Roeckx
kroeckx at alioth.debian.org
Mon Jun 8 18:35:07 UTC 2009
Author: kroeckx
Date: 2009-06-08 18:35:07 +0000 (Mon, 08 Jun 2009)
New Revision: 414
Modified:
openssl/branches/etch/debian/changelog
openssl/branches/etch/ssl/d1_both.c
Log:
Fix DoS via an out-of-sequence DTLS handshake message (CVE-2009-1387)
Modified: openssl/branches/etch/debian/changelog
===================================================================
--- openssl/branches/etch/debian/changelog 2009-06-08 18:09:52 UTC (rev 413)
+++ openssl/branches/etch/debian/changelog 2009-06-08 18:35:07 UTC (rev 414)
@@ -2,6 +2,7 @@
* Fix DoS via a DTLS ChangeCipherSpec packet that occurs before ClientHello
(CVE-2009-1386)
+ * Fix DoS via an out-of-sequence DTLS handshake message (CVE-2009-1387)
-- Kurt Roeckx <kurt at roeckx.be> Mon, 08 Jun 2009 20:07:31 +0200
Modified: openssl/branches/etch/ssl/d1_both.c
===================================================================
--- openssl/branches/etch/ssl/d1_both.c 2009-06-08 18:09:52 UTC (rev 413)
+++ openssl/branches/etch/ssl/d1_both.c 2009-06-08 18:35:07 UTC (rev 414)
@@ -585,30 +585,31 @@
}
}
- frag = dtls1_hm_fragment_new(frag_len);
- if ( frag == NULL)
- goto err;
+ if (frag_len)
+ {
+ frag = dtls1_hm_fragment_new(frag_len);
+ if ( frag == NULL)
+ goto err;
- memcpy(&(frag->msg_header), msg_hdr, sizeof(*msg_hdr));
+ memcpy(&(frag->msg_header), msg_hdr, sizeof(*msg_hdr));
- if (frag_len)
- {
- /* read the body of the fragment (header has already been read */
+ /* read the body of the fragment (header has already been read) */
i = s->method->ssl_read_bytes(s,SSL3_RT_HANDSHAKE,
frag->fragment,frag_len,0);
if (i<=0 || i!=frag_len)
goto err;
- }
- pq_64bit_init(&seq64);
- pq_64bit_assign_word(&seq64, msg_hdr->seq);
+ pq_64bit_init(&seq64);
+ pq_64bit_assign_word(&seq64, msg_hdr->seq);
- item = pitem_new(seq64, frag);
- pq_64bit_free(&seq64);
- if ( item == NULL)
- goto err;
+ item = pitem_new(seq64, frag);
+ pq_64bit_free(&seq64);
+ if ( item == NULL)
+ goto err;
- pqueue_insert(s->d1->buffered_messages, item);
+ pqueue_insert(s->d1->buffered_messages, item);
+ }
+
return DTLS1_HM_FRAGMENT_RETRY;
err:
More information about the Pkg-openssl-changes
mailing list