From: Dr. Stephen Henson <steve@openssl.org>
Date: Sat, 31 Mar 2012 18:02:43 +0000 (+0000)
Subject: PR: 2778(part)
X-Git-Tag: OpenSSL_1_0_1a~25
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=63e8f167370880504e27ec8773641f4c5196e9f8;p=oweals%2Fopenssl.git

PR: 2778(part)
Submitted by: John Fitzgibbon <john_fitzgibbon@yahoo.com>

Time is always encoded as 4 bytes, not sizeof(Time).
---

diff --git a/ssl/d1_srvr.c b/ssl/d1_srvr.c
index 5822379d10..29421da9aa 100644
--- a/ssl/d1_srvr.c
+++ b/ssl/d1_srvr.c
@@ -920,7 +920,7 @@ int dtls1_send_server_hello(SSL *s)
 		p=s->s3->server_random;
 		Time=(unsigned long)time(NULL);			/* Time */
 		l2n(Time,p);
-		RAND_pseudo_bytes(p,SSL3_RANDOM_SIZE-sizeof(Time));
+		RAND_pseudo_bytes(p,SSL3_RANDOM_SIZE-4);
 		/* Do the message type and length last */
 		d=p= &(buf[DTLS1_HM_HEADER_LENGTH]);