CVSROOT: /cvs Module name: src Changes by: js...@cvs.openbsd.org 2014/06/10 05:26:34
Modified files:
lib/libssl/src/ssl: s3_enc.c
Log message:
Ensure ssl3_final_finish_mac() returns failure if either the MD5 or SHA1
handshake MAC calculation fails. Currently, the result from both
ssl3_handshake_mac() calls is added together. This means that unless both
MD5 and SHA1 fail, a positive value will be returned to the caller,
indicating success rather than failure.
ok deraadt@ miod@ sthen@
