1 --- openssl-1.0.1e/ssl/s3_cbc.c	2013-02-14 08:06:58.000000000 -0800

     2 +++ openssl-1.0.1e/ssl/s3_cbc.c.orig 2013-02-14 03:04:08.440194448 -0700

     3 @@ -148,7 +148,7 @@

     4  	unsigned padding_length, good, to_check, i;

     5  	const unsigned overhead = 1 /* padding length byte */ + mac_size;

     6  	/* Check if version requires explicit IV */

     7 -	if (s->version >= TLS1_1_VERSION || s->version == DTLS1_VERSION)

     8 +	if (s->version >= TLS1_1_VERSION || s->version == DTLS1_BAD_VER)

     9  		{

    10  		/* These lengths are all public so we can test them in

    11  		* non-constant time.