OpenSSL - Quickly patch openssl issue

Submitted-by: Peter Avalos <pavalos@theshell.com>
DragonFlyBSD · Mar 27, 2010 · f759e33 · f759e33
1 parent e7b75ee
commit f759e33
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/crypto/openssl/ssl/s3_pkt.c b/crypto/openssl/ssl/s3_pkt.c
@@ -291,9 +291,10 @@ static int ssl3_get_record(SSL *s)
 			if (version != s->version)
 				{
 				SSLerr(SSL_F_SSL3_GET_RECORD,SSL_R_WRONG_VERSION_NUMBER);
-				/* Send back error using their
-				 * version number :-) */
-				s->version=version;
+				if ((s->version & 0xFF00) == (version & 0xFF00))
+					/* Send back error using their minor version number :-) */
+
+					s->version = (unsigned short)version;
 				al=SSL_AD_PROTOCOL_VERSION;
 				goto f_err;
 				}