1 diff --git a/nss/lib/ssl/ssl3ext.c b/nss/lib/ssl/ssl3ext.c 2 index cdebcc9..03cf05c 100644 3 --- a/nss/lib/ssl/ssl3ext.c 4 +++ b/nss/lib/ssl/ssl3ext.c 5 @@ -2306,7 +2306,11 @@ ssl3_CalculatePaddingExtensionLength(unsigned int clientHelloLength) 6 clientHelloLength; 7 unsigned int extensionLength; 8 9 - if (recordLength < 256 || recordLength >= 512) { 10 + /* This condition should be: 11 + * if (recordLength < 256 || recordLength >= 512) { 12 + * It has been changed, temporarily, to test whether 512 byte ClientHellos 13 + * are a compatibility problem. */ 14 + if (recordLength >= 512) { 15 return 0; 16 } 17 18 @@ -2327,7 +2331,7 @@ ssl3_AppendPaddingExtension(sslSocket *ss, unsigned int extensionLen, 19 PRUint32 maxBytes) 20 { 21 unsigned int paddingLen = extensionLen - 4; 22 - unsigned char padding[256]; 23 + unsigned char padding[512]; 24 25 if (extensionLen == 0) { 26 return 0; 27