wine/gecko
0
0
Fork 0
mirror of https://gitlab.winehq.org/wine/wine-gecko.git synced 2024-09-13 09:24:08 -07:00
Code Issues Packages Projects Releases Wiki Activity

Bug 1072382 - Remove version intolerance marker on inappropriate_fallback alert, r=keeler

Browse Source
This commit is contained in:
Martin Thomson 2014-10-02 10:03:30 -07:00
parent b94b1a89df
commit e675583d7e
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
security/manager/ssl/src/nsNSSIOLayer.cpp
View File

@ -1030,6 +1030,17 @@ retryDueToTLSIntolerance(PRErrorCode err, nsNSSSocketInfo* socketInfo)
uint32_t reason;
switch (err) {
case SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT:
// This is a clear signal that we've fallen back too many versions. Treat
// this as a hard failure now, but also mark the next higher version as
// being tolerant so that later attempts don't use this version (i.e.,
// range.max), which makes the error unrecoverable without a full restart.
socketInfo->SharedState().IOLayerHelpers()
.rememberTolerantAtVersion(socketInfo->GetHostName(),
socketInfo->GetPort(),
range.max + 1);
return false;
case SSL_ERROR_BAD_MAC_ALERT: reason = 1; break;
case SSL_ERROR_BAD_MAC_READ: reason = 2; break;
case SSL_ERROR_HANDSHAKE_FAILURE_ALERT: reason = 3; break;