Index: net/third_party/nss/ssl/ssl3con.c |
diff --git a/net/third_party/nss/ssl/ssl3con.c b/net/third_party/nss/ssl/ssl3con.c |
index 5476fa5e28d8c88f66653d9754a12cea95a7487d..f97065a69e84b5e3444975cf5fac35eb222f7366 100644 |
--- a/net/third_party/nss/ssl/ssl3con.c |
+++ b/net/third_party/nss/ssl/ssl3con.c |
@@ -6108,6 +6108,7 @@ ssl3_CanFalseStart(sslSocket *ss) { |
rv = ss->opt.enableFalseStart && |
!ss->sec.isServer && |
!ss->ssl3.hs.isResuming && |
+ ssl3_ExtensionNegotiated(ss, ssl_next_proto_nego_xtn) && |
ss->ssl3.cwSpec && |
/* An attacker can control the selected ciphersuite so we only wish to |