Skip to content

Instantly share code, notes, and snippets.

@ceme

ceme/heartbleed_fix

Created April 28, 2014 17:36
Show Gist options
  • Save ceme/11378795 to your computer and use it in GitHub Desktop.
Save ceme/11378795 to your computer and use it in GitHub Desktop.
Download ZIP
Heartbleed Bug: OpenSSL Vulnerability (the FIX)
Raw
heartbleed_fix
if (1 + 2 + 16 > s->s3->rrec.length) return 0;
hbtype = *p++;
n2s(p, payload);
if (1 + 2 + payload + 16 > s->s3->rrec.length) return 0;
pl = p;
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment