From 5200244031914572d7eec094efe3c2ab3731ebe1 Mon Sep 17 00:00:00 2001 From: Matt Sergeant Date: Thu, 2 Jun 2011 12:57:50 -0400 Subject: [PATCH] Fix STARTTLS vulnerability for async --- plugins/tls | 1 + 1 file changed, 1 insertion(+) diff --git a/plugins/tls b/plugins/tls index 37fbc9a..f850d2c 100644 --- a/plugins/tls +++ b/plugins/tls @@ -275,6 +275,7 @@ sub upgrade_socket { my UpgradeClientSSL $self = shift; unless ( $self->{_ssl_started} ) { + $self->{_stashed_qp}->clear_data(); IO::Socket::SSL->start_SSL( $self->{_stashed_qp}->{sock}, { SSL_use_cert => 1,