diff --git a/src/internal.c b/src/internal.c index 96d6348a2..70cbfc3c4 100644 --- a/src/internal.c +++ b/src/internal.c @@ -3468,10 +3468,10 @@ int DoApplicationData(CYASSL* ssl, byte* input, word32* inOutIdx) if (ret != 0) return ret; } - else { /* sslv3, some implementations have pad padding */ + else { /* sslv3, some implementations have bad padding */ ssl->hmac(ssl, verify, rawData, msgSz - digestSz - pad - 1, application_data, 1); - if (ConstantCompare(verify,rawData + msgSz - digestSz - pad - 1, + if (ConstantCompare(verify, rawData + msgSz - digestSz - pad - 1, digestSz) != 0) return VERIFY_MAC_ERROR; }