generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Client side compression algorithm sanity checks: ensure old compression

Browse Source 
algorithm matches current and give error if compression is disabled and
server requests it (shouldn't happen unless server is broken).
This commit is contained in:
Dr. Stephen Henson
2010-01-01 14:39:37 +00:00
parent e6f418bcb7
commit 2be3d6ebc8
4 changed files with 27 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ssl/s3_srvr.c
View File

@@ -1159,7 +1159,7 @@ int ssl3_get_client_hello(SSL *s)
/* If compression is disabled we'd better not try to resume a session
* using compression.
*/
if (s->session->compress_id != 0)
if (s->session->compress_meth != 0)
{
al=SSL_AD_INTERNAL_ERROR;
SSLerr(SSL_F_SSL3_GET_CLIENT_HELLO,SSL_R_INCONSISTENT_COMPRESSION);