Fix flaw if 'Server Key exchange message' is omitted from a TLS
authorMark J. Cox <mark@openssl.org>
Wed, 28 May 2008 07:29:27 +0000 (07:29 +0000)
committerMark J. Cox <mark@openssl.org>
Wed, 28 May 2008 07:29:27 +0000 (07:29 +0000)
commit2c0fa03dc62f052cc64bbed435e974c952ab6363
tree01cc32b5a70c7ba5f51d8098ce2e4a4a8d1880ac
parentd3b3a6d389c9824c80e503229ff2a6109031736f
Fix flaw if 'Server Key exchange message' is omitted from a TLS
handshake which could lead to a cilent crash as found using the
Codenomicon TLS test suite (CVE-2008-1672)

Reviewed by: openssl-security@openssl.org

Obtained from: mark@awe.com
CHANGES
ssl/s3_clnt.c