comment

diff --git a/ssl/s3_enc.c b/ssl/s3_enc.c
index f3a9c51404f00677e2436438260f3898cf37537c..af7075e92020f929e799e2dd5f25e964b8a071cd 100644 (file)
--- a/ssl/s3_enc.c
+++ b/ssl/s3_enc.c
@@ -397,7 +397,8 @@ int ssl3_enc(SSL *s, int send)
                                {
                                /* Incorrect padding. SSLerr() and ssl3_alert are done
                                 * by caller: we don't want to reveal whether this is
-                                * a decryption error or a MAC verification failure. */
+                                * a decryption error or a MAC verification failure
+                                * (see http://www.openssl.org/~bodo/tls-cbc.txt) */
                                return -1;
                                }
                        rec->length-=i;

diff --git a/ssl/t1_enc.c b/ssl/t1_enc.c
index 062c56d7d15fbee288ce866a1f872530e756f82b..ff4f0c8ca902e4f87e4b0f2b7e1be9fb649b19e4 100644 (file)
--- a/ssl/t1_enc.c
+++ b/ssl/t1_enc.c
@@ -478,7 +478,8 @@ int tls1_enc(SSL *s, int send)
                                {
                                /* Incorrect padding. SSLerr() and ssl3_alert are done
                                 * by caller: we don't want to reveal whether this is
-                                * a decryption error or a MAC verification failure. */
+                                * a decryption error or a MAC verification failure
+                                * (see http://www.openssl.org/~bodo/tls-cbc.txt) */
                                return -1;
                                }
                        for (j=(int)(l-i); j<(int)l; j++)