openssl/sme8/openssl-fips-0.9.8e-cve-2011-4576.patch

diff -up openssl-fips-0.9.8e/CHANGES.padding openssl-fips-0.9.8e/CHANGES
diff -up openssl-fips-0.9.8e/ssl/s3_enc.c.padding openssl-fips-0.9.8e/ssl/s3_enc.c
--- openssl-fips-0.9.8e/ssl/s3_enc.c.padding    2007-03-22 01:39:14.000000000 +0100
+++ openssl-fips-0.9.8e/ssl/s3_enc.c    2012-01-16 10:40:02.146294455 +0100
@@ -480,6 +480,9 @@ int ssl3_enc(SSL *s, int send)
 
                        /* we need to add 'i-1' padding bytes */
                        l+=i;
+                       /* the last of these zero bytes will be overwritten
+                        * with the padding length. */
+                       memset(&rec->input[rec->length], 0, i);
                        rec->length+=i;
                        rec->input[l-1]=(i-1);
                        }
1	wellsi	1.1	diff -up openssl-fips-0.9.8e/CHANGES.padding openssl-fips-0.9.8e/CHANGES
2			diff -up openssl-fips-0.9.8e/ssl/s3_enc.c.padding openssl-fips-0.9.8e/ssl/s3_enc.c
3			--- openssl-fips-0.9.8e/ssl/s3_enc.c.padding 2007-03-22 01:39:14.000000000 +0100
4			+++ openssl-fips-0.9.8e/ssl/s3_enc.c 2012-01-16 10:40:02.146294455 +0100
5			@@ -480,6 +480,9 @@ int ssl3_enc(SSL *s, int send)
6
7			/* we need to add 'i-1' padding bytes */
8			l+=i;
9			+ /* the last of these zero bytes will be overwritten
10			+ * with the padding length. */
11			+ memset(&rec->input[rec->length], 0, i);
12			rec->length+=i;
13			rec->input[l-1]=(i-1);
14			}