Clear bytes used for block padding of SSL 3.0 records. (CVE-2011-4576) [include source patch this time!]

2012-01-04 15:38:54 +00:00 · 2012-01-04 15:38:54 +00:00 · 8206dba75c
commit 8206dba75c
parent 528ef87850
1 changed files with 3 additions and 0 deletions
--- a/ssl/s3_enc.c
+++ b/ssl/s3_enc.c
@ -511,6 +511,9 @@ int ssl3_enc(SSL *s, int send)

 			/* we need to add 'i-1' padding bytes */
 			l+=i;
+			/* the last of these zero bytes will be overwritten
+			 * with the padding length. */
+			memset(&rec->input[rec->length], 0, i);
 			rec->length+=i;
 			rec->input[l-1]=(i-1);
 			}