Re: Issue with dtls1_clear changes from issue #2506

2011-09-19 Thread Michael Tuexen
On Sep 16, 2011, at 12:51 PM, Paul Witty wrote: > On 15/09/11 18:12, Michael Tuexen wrote: >> Hi Paul, >> >> I think this is what Robin found. Could you give the patch provided by Robin >> in >> http://rt.openssl.org/Ticket/Display.html?id=2602 >> a try? It should fix your issue. > It does indee

Re: Issue with dtls1_clear changes from issue #2506

2011-09-16 Thread Paul Witty
On 15/09/11 18:12, Michael Tuexen wrote: Hi Paul, I think this is what Robin found. Could you give the patch provided by Robin in http://rt.openssl.org/Ticket/Display.html?id=2602 a try? It should fix your issue. It does indeed; the code to reproduce is for informational purposes only, as you d

Re: Issue with dtls1_clear changes from issue #2506

2011-09-16 Thread Michael Tuexen
On Sep 15, 2011, at 6:57 PM, Paul Witty wrote: > The code which reproduces the crash (not necessarily minimal): > > SSL_CTX * dtls_context = SSL_CTX_new(DTLSv1_method()); > SSL_CTX_set_read_ahead(dtls_context, 1); > SSL_CTX_set_cipher_list(dtls_context, "DEFAULT:!LOW:!EXP:!MD5"); > SSL_CTX_set_op

Re: Issue with dtls1_clear changes from issue #2506

2011-09-15 Thread Paul Witty
The code which reproduces the crash (not necessarily minimal): SSL_CTX * dtls_context = SSL_CTX_new(DTLSv1_method()); SSL_CTX_set_read_ahead(dtls_context, 1); SSL_CTX_set_cipher_list(dtls_context, "DEFAULT:!LOW:!EXP:!MD5"); SSL_CTX_set_options(dtls_context, SSL_OP_NO_TICKET); SSL * client_ssl = S

Re: Issue with dtls1_clear changes from issue #2506

2011-09-12 Thread Robin Seggelmann
Hi Paul, On Sep 9, 2011, at 4:56 PM, Paul Witty wrote: > Since updating to OpenSSL 1.0.0e from 1.0.0d, I've been suffering a crash > when connecting with DTLS. I've tracked this down to trying to perform a > memcpy of (unsigned int)-13 in do_dtls1_write (where a length of -13 is > passed all

Re: Issue with dtls1_clear changes from issue #2506

2011-09-10 Thread Michael Tüxen
On Sep 9, 2011, at 4:56 PM, Paul Witty wrote: > Hi, > Since updating to OpenSSL 1.0.0e from 1.0.0d, I've been suffering a crash > when connecting with DTLS. I've tracked this down to trying to perform a > memcpy of (unsigned int)-13 in do_dtls1_write (where a length of -13 is > passed all the

Issue with dtls1_clear changes from issue #2506

2011-09-10 Thread Paul Witty
Hi, Since updating to OpenSSL 1.0.0e from 1.0.0d, I've been suffering a crash when connecting with DTLS. I've tracked this down to trying to perform a memcpy of (unsigned int)-13 in do_dtls1_write (where a length of -13 is passed all the way down from dtls1_do_Write, which seems to be because