CVSROOT:        /cvs
Module name:    src
Changes by:     js...@cvs.openbsd.org   2021/06/29 12:43:49

Modified files:
        lib/libssl     : ssl_pkt.c 

Log message:
Reject zero-length non-application data fragments in the legacy stack.

Per RFC 5246 section 6.2.1, zero-length fragments are only permitted for
application data - reject all others.

Reported via GitHub issue #675.

ok inoguchi@ tb@

Reply via email to