X-Git-Url: http://git.ozo.com/?a=blobdiff_plain;f=package%2Fopenssl%2Fpatches%2F400-cve-2010-0740.patch;fp=package%2Fopenssl%2Fpatches%2F400-cve-2010-0740.patch;h=4c893eb38dd03050eec0762b2dd2305526f73b6f;hb=bdaa1830146059a3d43d2e45a3620641ea28794a;hp=0000000000000000000000000000000000000000;hpb=52fc6ae252b1d2812d889824df99f243fc73dbb7;p=openwrt-10.03%2F.git

diff --git a/package/openssl/patches/400-cve-2010-0740.patch b/package/openssl/patches/400-cve-2010-0740.patch
new file mode 100644
index 000000000..4c893eb38
--- /dev/null
+++ b/package/openssl/patches/400-cve-2010-0740.patch
@@ -0,0 +1,15 @@
+--- a/ssl/s3_pkt.c
++++ b/ssl/s3_pkt.c
+@@ -291,9 +291,9 @@ again:
+ 			if (version != s->version)
+ 				{
+ 				SSLerr(SSL_F_SSL3_GET_RECORD,SSL_R_WRONG_VERSION_NUMBER);
+-				/* Send back error using their
+-				 * version number :-) */
+-				s->version=version;
++                                if ((s->version & 0xFF00) == (version & 0xFF00))
++                                	/* Send back error using their minor version number :-) */
++					s->version = (unsigned short)version;
+ 				al=SSL_AD_PROTOCOL_VERSION;
+ 				goto f_err;
+ 				}