openssl/sme8/openssl-fips-0.9.8e-cve-2011-4576.patch

diff -up openssl-fips-0.9.8e/CHANGES.padding openssl-fips-0.9.8e/CHANGES
diff -up openssl-fips-0.9.8e/ssl/s3_enc.c.padding openssl-fips-0.9.8e/ssl/s3_enc.c
--- openssl-fips-0.9.8e/ssl/s3_enc.c.padding    2007-03-22 01:39:14.000000000 +0100
+++ openssl-fips-0.9.8e/ssl/s3_enc.c    2012-01-16 10:40:02.146294455 +0100
@@ -480,6 +480,9 @@ int ssl3_enc(SSL *s, int send)
 
                        /* we need to add 'i-1' padding bytes */
                        l+=i;
+                       /* the last of these zero bytes will be overwritten
+                        * with the padding length. */
+                       memset(&rec->input[rec->length], 0, i);
                        rec->length+=i;
                        rec->input[l-1]=(i-1);
                        }
1	diff -up openssl-fips-0.9.8e/CHANGES.padding openssl-fips-0.9.8e/CHANGES
2	diff -up openssl-fips-0.9.8e/ssl/s3_enc.c.padding openssl-fips-0.9.8e/ssl/s3_enc.c
3	--- openssl-fips-0.9.8e/ssl/s3_enc.c.padding 2007-03-22 01:39:14.000000000 +0100
4	+++ openssl-fips-0.9.8e/ssl/s3_enc.c 2012-01-16 10:40:02.146294455 +0100
5	@@ -480,6 +480,9 @@ int ssl3_enc(SSL *s, int send)
6
7	/* we need to add 'i-1' padding bytes */
8	l+=i;
9	+ /* the last of these zero bytes will be overwritten
10	+ * with the padding length. */
11	+ memset(&rec->input[rec->length], 0, i);
12	rec->length+=i;
13	rec->input[l-1]=(i-1);
14	}