From: Bodo Möller <bodo@openssl.org>
Date: Mon, 15 Oct 2001 17:42:43 +0000 (+0000)
Subject: Fix ssl3_get_message to handle message fragmentation correctly.
X-Git-Tag: OpenSSL_0_9_6c~90
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=2dbdcd9734247e4aaee72b9aadcddb841212b003;p=oweals%2Fopenssl.git

Fix ssl3_get_message to handle message fragmentation correctly.
---

diff --git a/CHANGES b/CHANGES
index 8ae782e1f6..2cea42b00b 100644
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,10 @@
 
  Changes between 0.9.6b and 0.9.6c  [XX xxx XXXX]
 
+  *) Fix ssl3_get_message (ssl/s3_both.c) to handle message fragmentation
+     correctly.
+     [Bodo Moeller]
+
   *) Avoid infinite loop in ssl3_get_message (ssl/s3_both.c) if a
      client receives HelloRequest while in a handshake.
      [Bodo Moeller; bug noticed by Andy Schneider <andy.schneider@bjss.co.uk>]
diff --git a/ssl/s3_both.c b/ssl/s3_both.c
index f1f9c6ce7a..3f09b8bc17 100644
--- a/ssl/s3_both.c
+++ b/ssl/s3_both.c
@@ -436,6 +436,7 @@ long ssl3_get_message(SSL *s, int st1, int stn, int mt, long max, int *ok)
 	/* next state (stn) */
 	p=(unsigned char *)s->init_buf->data;
 	n=s->s3->tmp.message_size;
+	n -= s->init_num;
 	while (n > 0)
 		{
 		i=ssl3_read_bytes(s,SSL3_RT_HANDSHAKE,&p[s->init_num],n,0);