Fix STARTTLS vulnerability for async

baudehlo · Jun 2, 2011 · 5200244 · 5200244
1 parent b7668c0
commit 5200244
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/plugins/tls b/plugins/tls
@@ -275,6 +275,7 @@ sub upgrade_socket {
     my UpgradeClientSSL $self = shift;
 
     unless ( $self->{_ssl_started} ) {
+        $self->{_stashed_qp}->clear_data();
         IO::Socket::SSL->start_SSL(
             $self->{_stashed_qp}->{sock}, {
                 SSL_use_cert => 1,