From: Dr. Stephen Henson <steve@openssl.org>
Date: Sat, 31 Mar 2012 18:02:35 +0000 (+0000)
Subject: PR: 2778(part)
X-Git-Tag: OpenSSL_1_0_0i~8
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=7fdccda37d628cc932accaceab44893da8e14a5d;p=oweals%2Fopenssl.git

PR: 2778(part)
Submitted by: John Fitzgibbon <john_fitzgibbon@yahoo.com>

Time is always encoded as 4 bytes, not sizeof(Time).
---

diff --git a/ssl/d1_srvr.c b/ssl/d1_srvr.c
index 17cc022751..41fac4c688 100644
--- a/ssl/d1_srvr.c
+++ b/ssl/d1_srvr.c
@@ -771,7 +771,7 @@ int dtls1_send_server_hello(SSL *s)
 		p=s->s3->server_random;
 		Time=(unsigned long)time(NULL);			/* Time */
 		l2n(Time,p);
-		RAND_pseudo_bytes(p,SSL3_RANDOM_SIZE-sizeof(Time));
+		RAND_pseudo_bytes(p,SSL3_RANDOM_SIZE-4);
 		/* Do the message type and length last */
 		d=p= &(buf[DTLS1_HM_HEADER_LENGTH]);