diff options
author | Magnus Kroken <mkroken@gmail.com> | 2016-06-12 23:49:42 +0200 |
---|---|---|
committer | John Crispin <john@phrozen.org> | 2016-06-13 22:51:43 +0200 |
commit | 4260d11e8b47a8a7aac0927abe2c9e89931b4467 (patch) | |
tree | 265bea155be718a58dd63230cf0a4d4487785ca6 /package/network/services/openvpn/patches/101-remove_polarssl_debug_call.patch | |
parent | f869ffdd623f7bee98c8cebbb7295256bc9ebceb (diff) | |
download | upstream-4260d11e8b47a8a7aac0927abe2c9e89931b4467.tar.gz upstream-4260d11e8b47a8a7aac0927abe2c9e89931b4467.tar.bz2 upstream-4260d11e8b47a8a7aac0927abe2c9e89931b4467.zip |
openvpn: update to 2.3.11
Security fixes:
* Fixed port-share bug with DoS potential
* Fix buffer overflow by user supplied data
Full changelog: https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23#OpenVPN2.3.11
Signed-off-by: Magnus Kroken <mkroken@gmail.com>
Diffstat (limited to 'package/network/services/openvpn/patches/101-remove_polarssl_debug_call.patch')
-rw-r--r-- | package/network/services/openvpn/patches/101-remove_polarssl_debug_call.patch | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/package/network/services/openvpn/patches/101-remove_polarssl_debug_call.patch b/package/network/services/openvpn/patches/101-remove_polarssl_debug_call.patch new file mode 100644 index 0000000000..3cef32395e --- /dev/null +++ b/package/network/services/openvpn/patches/101-remove_polarssl_debug_call.patch @@ -0,0 +1,21 @@ +openvpn: remove call to PolarSSL debug function + +OpenVPN >=2.3.11 uses PolarSSL debug functions for improved logging. +This requires that PolarSSL is built with POLARSSL_DEBUG_C, which increases +its size significantly. + +This change does not impact OpenVPN operation, see: +https://sourceforge.net/p/openvpn/mailman/message/35153943/ + +Signed-off-by: Magnus Kroken <mkroken@gmail.com> + +--- a/src/openvpn/ssl_polarssl.c ++++ b/src/openvpn/ssl_polarssl.c +@@ -742,7 +742,7 @@ void key_state_ssl_init(struct key_state + if (polar_ok(ssl_init(ks_ssl->ctx))) + { + /* Initialise SSL context */ +- debug_set_threshold(3); ++ /*debug_set_threshold(3);*/ + ssl_set_dbg (ks_ssl->ctx, my_debug, NULL); + ssl_set_endpoint (ks_ssl->ctx, ssl_ctx->endpoint); |