From: Dr. Stephen Henson <steve@openssl.org>
Date: Sat, 23 Sep 2006 17:30:25 +0000 (+0000)
Subject: Update from HEAD.
X-Git-Tag: OpenSSL_0_9_8d~2
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=81780a3b6290836f3ef64eafe7143e892e7fa5cc;p=openssl

Update from HEAD.
---

diff --git a/ssl/d1_pkt.c b/ssl/d1_pkt.c
index be6ee32326..f8f4516525 100644
--- a/ssl/d1_pkt.c
+++ b/ssl/d1_pkt.c
@@ -796,8 +796,14 @@ start:
 			dest = s->d1->alert_fragment;
 			dest_len = &s->d1->alert_fragment_len;
 			}
-		else	/* else it's a CCS message */
-			OPENSSL_assert(rr->type == SSL3_RT_CHANGE_CIPHER_SPEC);
+                /* else it's a CCS message, or it's wrong */
+                else if (rr->type != SSL3_RT_CHANGE_CIPHER_SPEC)
+                        {
+                          /* Not certain if this is the right error handling */
+                          al=SSL_AD_UNEXPECTED_MESSAGE;
+                          SSLerr(SSL_F_DTLS1_READ_BYTES,SSL_R_UNEXPECTED_RECORD);
+                          goto f_err;
+                        }
 
 
 		if (dest_maxlen > 0)