| CHANGES.SSLeay (55715) | CHANGES.SSLeay (238405) |
|---|---|
| 1This file contains the changes for the SSLeay library up to version 20.9.0b. For later changes, see the file "CHANGES". 3 4 SSLeay CHANGES 5 ______________ 6 7Changes between 0.8.x and 0.9.0b 8 --- 134 unchanged lines hidden (view full) --- 143 14411-Sep-97 145 - Ugly bug in ssl3_write_bytes(). Basically if application land 146 does a SSL_write(ssl,buf,len) where len > 16k, the SSLv3 write code 147 did not check the size and tried to copy the entire buffer. 148 This would tend to cause memory overwrites since SSLv3 has 149 a maximum packet size of 16k. If your program uses 150 buffers <= 16k, you would probably never see this problem. | 1This file contains the changes for the SSLeay library up to version 20.9.0b. For later changes, see the file "CHANGES". 3 4 SSLeay CHANGES 5 ______________ 6 7Changes between 0.8.x and 0.9.0b 8 --- 134 unchanged lines hidden (view full) --- 143 14411-Sep-97 145 - Ugly bug in ssl3_write_bytes(). Basically if application land 146 does a SSL_write(ssl,buf,len) where len > 16k, the SSLv3 write code 147 did not check the size and tried to copy the entire buffer. 148 This would tend to cause memory overwrites since SSLv3 has 149 a maximum packet size of 16k. If your program uses 150 buffers <= 16k, you would probably never see this problem. |
| 151 - Fixed a new errors that were cause by malloc() not returning | 151 - Fixed a few errors that were cause by malloc() not returning |
| 152 0 initialised memory.. 153 - SSL_OP_NETSCAPE_CA_DN_BUG was being switched on when using 154 SSL_CTX_set_options(ssl_ctx,SSL_OP_ALL); which was a bad thing 155 since this flags stops SSLeay being able to handle client 156 cert requests correctly. 157 15808-Sep-97 159 - SSL_SESS_CACHE_NO_INTERNAL_LOOKUP option added. When switched --- 809 unchanged lines hidden --- | 152 0 initialised memory.. 153 - SSL_OP_NETSCAPE_CA_DN_BUG was being switched on when using 154 SSL_CTX_set_options(ssl_ctx,SSL_OP_ALL); which was a bad thing 155 since this flags stops SSLeay being able to handle client 156 cert requests correctly. 157 15808-Sep-97 159 - SSL_SESS_CACHE_NO_INTERNAL_LOOKUP option added. When switched --- 809 unchanged lines hidden --- |