From 533282da863c27be4805fc1655f82f5d9550194b Mon Sep 17 00:00:00 2001 From: blogic Date: Thu, 18 Sep 2014 15:24:45 +0000 Subject: [PATCH] cyassl: update to version 3.2.0 This fixes a security problem: Security fix for RSA Padding check vulnerability Signed-off-by: Hauke Mehrtens Backport of r42526 git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42614 3c298f89-4303-0410-b956-a3cf2f4a3e73 --- package/libs/cyassl/Makefile | 4 ++-- .../cyassl/patches/200-SSL_accept-handle-hello-garbage.patch | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/libs/cyassl/Makefile b/package/libs/cyassl/Makefile index 11ca9c2..03f78cf 100644 --- a/package/libs/cyassl/Makefile +++ b/package/libs/cyassl/Makefile @@ -8,12 +8,12 @@ include $(TOPDIR)/rules.mk PKG_NAME:=cyassl -PKG_VERSION:=3.1.0 +PKG_VERSION:=3.2.0 PKG_RELEASE:=1 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).zip PKG_SOURCE_URL:=http://www.yassl.com/ -PKG_MD5SUM:=72477eb50697e759d309c49cb1aef18a +PKG_MD5SUM:=a80493c224ff86e45dc333c06d5edb88 PKG_FIXUP:=libtool PKG_INSTALL:=1 diff --git a/package/libs/cyassl/patches/200-SSL_accept-handle-hello-garbage.patch b/package/libs/cyassl/patches/200-SSL_accept-handle-hello-garbage.patch index 82e08c0..5463cb0 100644 --- a/package/libs/cyassl/patches/200-SSL_accept-handle-hello-garbage.patch +++ b/package/libs/cyassl/patches/200-SSL_accept-handle-hello-garbage.patch @@ -1,6 +1,6 @@ --- a/src/internal.c +++ b/src/internal.c -@@ -5600,6 +5600,10 @@ int ProcessReply(CYASSL* ssl) +@@ -6037,6 +6037,10 @@ int ProcessReply(CYASSL* ssl) b1 = ssl->buffers.inputBuffer.buffer[ssl->buffers.inputBuffer.idx++]; ssl->curSize = (word16)(((b0 & 0x7f) << 8) | b1);