diff --git a/ssl/s3_enc.c b/google3/third_party/openssl/openssl/ssl/s3_enc.c | |
index 58386e1..b145970 100644 | |
--- a/ssl/s3_enc.c | |
+++ b/ssl/s3_enc.c | |
@@ -511,6 +511,9 @@ int ssl3_enc(SSL *s, int send) | |
/* we need to add 'i-1' padding bytes */ | |
l+=i; | |
+ /* the last of these zero bytes will be overwritten | |
+ * with the padding length. */ | |
+ memset(&rec->input[rec->length], 0, i); | |
rec->length+=i; | |
rec->input[l-1]=(i-1); | |
} |