commit a68c118837e9fa2346f471f6c9aefbba135333ae
author David Benjamin <davidben@google.com> Sun Jul 24 00:14:33 2016 -0400
committer David Benjamin <davidben@google.com> Sun Jul 24 04:47:21 2016 +0000
tree ae43d50eb0b6f0fd09328ac284b7fdb3c07d41e2
parent b9afd51ca1a9ef6e37514dbe5eb31a7f4ef78acd

Make SSL_get_extms_support a little friendlier.

It used to give a sensible answer ("no") before version negotiation.

Change-Id: I85b778a48cca7a4b66a81384eb18c447982875d1
Reviewed-on: https://boringssl-review.googlesource.com/8900
Reviewed-by: Matt Braithwaite <mab@google.com>
Reviewed-by: David Benjamin <davidben@google.com>
Commit-Queue: David Benjamin <davidben@google.com>

ssl/ssl_lib.c

diff --git a/ssl/ssl_lib.c b/ssl/ssl_lib.c
index 716a040..8328421 100644
--- a/ssl/ssl_lib.c
+++ b/ssl/ssl_lib.c
@@ -1126,6 +1126,9 @@
 }
 
 int SSL_get_extms_support(const SSL *ssl) {
+  if (!ssl->s3->have_version) {
+    return 0;
+  }
   return ssl3_protocol_version(ssl) >= TLS1_3_VERSION ||
          ssl->s3->tmp.extended_master_secret == 1;
 }