1diff --git a/nss/lib/ssl/ssl3ext.c b/nss/lib/ssl/ssl3ext.c 2index cdebcc9..03cf05c 100644 3--- a/nss/lib/ssl/ssl3ext.c 4+++ b/nss/lib/ssl/ssl3ext.c 5@@ -2306,7 +2306,11 @@ ssl3_CalculatePaddingExtensionLength(unsigned int clientHelloLength) 6 clientHelloLength; 7 unsigned int extensionLength; 8 9- if (recordLength < 256 || recordLength >= 512) { 10+ /* This condition should be: 11+ * if (recordLength < 256 || recordLength >= 512) { 12+ * It has been changed, temporarily, to test whether 512 byte ClientHellos 13+ * are a compatibility problem. */ 14+ if (recordLength >= 512) { 15 return 0; 16 } 17 18@@ -2327,7 +2331,7 @@ ssl3_AppendPaddingExtension(sslSocket *ss, unsigned int extensionLen, 19 PRUint32 maxBytes) 20 { 21 unsigned int paddingLen = extensionLen - 4; 22- unsigned char padding[256]; 23+ unsigned char padding[512]; 24 25 if (extensionLen == 0) { 26 return 0; 27