Home | History | Annotate | Download | only in patches
      1 diff --git a/nss/lib/ssl/ssl3ext.c b/nss/lib/ssl/ssl3ext.c
      2 index cdebcc9..03cf05c 100644
      3 --- a/nss/lib/ssl/ssl3ext.c
      4 +++ b/nss/lib/ssl/ssl3ext.c
      5 @@ -2306,7 +2306,11 @@ ssl3_CalculatePaddingExtensionLength(unsigned int clientHelloLength)
      6  				clientHelloLength;
      7      unsigned int extensionLength;
      8  
      9 -    if (recordLength < 256 || recordLength >= 512) {
     10 +    /* This condition should be:
     11 +     *   if (recordLength < 256 || recordLength >= 512) {
     12 +     * It has been changed, temporarily, to test whether 512 byte ClientHellos
     13 +     * are a compatibility problem. */
     14 +    if (recordLength >= 512) {
     15  	return 0;
     16      }
     17  
     18 @@ -2327,7 +2331,7 @@ ssl3_AppendPaddingExtension(sslSocket *ss, unsigned int extensionLen,
     19  			    PRUint32 maxBytes)
     20  {
     21      unsigned int paddingLen = extensionLen - 4;
     22 -    unsigned char padding[256];
     23 +    unsigned char padding[512];
     24  
     25      if (extensionLen == 0) {
     26  	return 0;
     27