From: Dr. Stephen Henson <steve@openssl.org>
Date: Wed, 20 Jul 2011 15:17:33 +0000 (+0000)
Subject: PR: 2555
X-Git-Tag: OpenSSL_1_0_0e~20
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=b58ea0b9418b900caad4401ca2eae1fa8a8dd7a0;p=oweals%2Fopenssl.git

PR: 2555
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Fix DTLS sequence number bug
---

diff --git a/ssl/d1_srvr.c b/ssl/d1_srvr.c
index 318920e76f..acf62abb51 100644
--- a/ssl/d1_srvr.c
+++ b/ssl/d1_srvr.c
@@ -167,6 +167,8 @@ int dtls1_accept(SSL *s)
 	s->in_handshake++;
 	if (!SSL_in_init(s) || SSL_in_before(s)) SSL_clear(s);
 
+	s->d1->listen = listen;
+
 	if (s->cert == NULL)
 		{
 		SSLerr(SSL_F_DTLS1_ACCEPT,SSL_R_NO_CERTIFICATE_SET);
@@ -276,6 +278,12 @@ int dtls1_accept(SSL *s)
 
 			s->init_num=0;
 
+			/* Reflect ClientHello sequence to remain stateless while listening */
+			if (listen)
+				{
+				memcpy(s->s3->write_sequence, s->s3->read_sequence, sizeof(s->s3->write_sequence));
+				}
+
 			/* If we're just listening, stop here */
 			if (listen && s->state == SSL3_ST_SW_SRVR_HELLO_A)
 				{