From 76cdb100646b93bc3c4a45cdbc262a10cb5063cb Mon Sep 17 00:00:00 2001
From: EKR <ekr@rtfm.com>
Date: Sun, 21 Feb 2016 14:21:45 -0800
Subject: Bug 1249940 - Fix version number for TLS 1.3 unencrypted records.
 r=mt

---
 lib/ssl/ssl3con.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/lib/ssl/ssl3con.c b/lib/ssl/ssl3con.c
index 42723ffc7..c40fc7122 100644
--- a/lib/ssl/ssl3con.c
+++ b/lib/ssl/ssl3con.c
@@ -2925,9 +2925,10 @@ ssl3_CompressMACEncryptRecord(ssl3CipherSpec *cwSpec,
     else {
         SSL3ProtocolVersion version = cwSpec->version;
 
-        if (capRecordVersion) {
+        if (capRecordVersion || version >= SSL_LIBRARY_VERSION_TLS_1_3) {
             version = PR_MIN(SSL_LIBRARY_VERSION_TLS_1_0, version);
         }
+
         wrBuf->buf[1] = MSB(version);
         wrBuf->buf[2] = LSB(version);
         wrBuf->buf[3] = MSB(cipherBytes);
-- 
cgit v1.2.1