1 --- openssl-1.0.0k/ssl/s3_cbc.c.orig	2013-02-05 03:58:46.000000000 -0800

     2 +++ openssl-1.0.0k/ssl/s3_cbc.c	2013-02-27 17:25:37.618740089 -0800

     3 @@ -137,7 +137,8 @@

     4  			    unsigned mac_size)

     5  	{

     6  	unsigned padding_length, good, to_check, i;

     7 -	const char has_explicit_iv = s->version == DTLS1_VERSION;

     8 +	const char has_explicit_iv =

     9 +	    (s->version == DTLS1_VERSION || s->version == DTLS1_BAD_VER);

    10  	const unsigned overhead = 1 /* padding length byte */ +

    11  				  mac_size +

    12  				  (has_explicit_iv ? block_size : 0);