tree e0cbb4fb435d47f4a8768787b72a73538a2f2c12
parent 5ba06a75324e33a8381556b98e52f5a3247227d0
author Emilia Käsper <emilia@openssl.org> 1406232929 +0200
committer Adam Langley <agl@google.com> 1407446025 +0000

Fix DTLS anonymous EC(DH) denial of service

(This change originally applied to 1.0.1. In the switch to 1.0.2, the
DTLS specific client processing was removed and now the s3_clnt.c
functions are used. This caused most of the patch to be moot. What
remains is still useful however. For the original patch, see the change
against 1.0.1: 88ae012c8092852f03c50f6461175271104b4c8a)

CVE-2014-3510

Reviewed-by: Dr. Stephen Henson <steve@openssl.org>

(Imported from upstream's 1d7d0ed9c21403d79d602b6c7d76fdecf5e737da)

Change-Id: I666f9c48d603f2366cab821ae446a57360c3026b
Reviewed-on: https://boringssl-review.googlesource.com/1439
Reviewed-by: Adam Langley <agl@google.com>