Fix uninitialised pointer dereference

This commit is contained in:
Manuel Pégourié-Gonnard 2014-11-11 22:17:26 +01:00
parent e9271e6835
commit 0369a5291b
3 changed files with 11 additions and 0 deletions

View file

@ -2,6 +2,11 @@ PolarSSL ChangeLog (Sorted per branch, date)
= PolarSSL 1.3.z branch
Security
* Fix remotely-triggerable uninitialised pointer dereference caused by
crafted X.509 certificate (server is not affected if it doesn't ask for a
client certificate) (found using Codenomicon Defensics).
Features
* Add function pk_check_pair() to test if public and private keys match.