From: Bodo Moeller <bodo@openssl.org>
Date: Tue, 21 Oct 2014 20:24:42 +0000 (+0200)
Subject: When processing ClientHello.cipher_suites, don't ignore cipher suites
X-Git-Tag: master-post-reformat~328
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=8cb30232ed9c5c0f99b8858eb3b0c85978f8aa36;p=oweals%2Fopenssl.git

When processing ClientHello.cipher_suites, don't ignore cipher suites
listed after TLS_FALLBACK_SCSV.

RT: 3575
Reviewed-by: Emilia Kasper <emilia@openssl.org>
---

diff --git a/ssl/ssl_lib.c b/ssl/ssl_lib.c
index c336a85aa3..d88e27db03 100644
--- a/ssl/ssl_lib.c
+++ b/ssl/ssl_lib.c
@@ -1618,6 +1618,7 @@ STACK_OF(SSL_CIPHER) *ssl_bytes_to_cipher_list(SSL *s,unsigned char *p,int num,
 					ssl3_send_alert(s,SSL3_AL_FATAL,SSL_AD_INAPPROPRIATE_FALLBACK);
 				goto err;
 				}
+			p += n;
 			continue;
 			}