net/third_party/nss/patches/paddingextensionall.patch

   1 diff -pu a/nss/lib/ssl/ssl3ext.c b/nss/lib/ssl/ssl3ext.c
   2 --- a/nss/lib/ssl/ssl3ext.c     2014-01-03 19:03:55.557150476 -0800
   3 +++ b/nss/lib/ssl/ssl3ext.c     2014-01-03 19:04:04.597298171 -0800
   4 @@ -2324,7 +2324,11 @@ ssl3_CalculatePaddingExtensionLength(uns
   5                                 clientHelloLength;
   6      unsigned int extensionLength;
   7
   8 -    if (recordLength < 256 || recordLength >= 512) {
   9 +    /* This condition should be:
  10 +     *   if (recordLength < 256 || recordLength >= 512) {
  11 +     * It has been changed, temporarily, to test whether 512 byte ClientHellos
  12 +     * are a compatibility problem. */
  13 +    if (recordLength >= 512) {
  14         return 0;
  15      }
  16
  17 @@ -2345,7 +2349,7 @@ ssl3_AppendPaddingExtension(sslSocket *s
  18                             PRUint32 maxBytes)
  19  {
  20      unsigned int paddingLen = extensionLen - 4;
  21 -    unsigned char padding[256];
  22 +    unsigned char padding[512];
  23
  24      if (extensionLen == 0) {
  25         return 0;