Merge branch 'iotssl-1368-unsafe-bounds-check-psk-identity-merge' into development-restricted

This commit is contained in:
Gilles Peskine 2017-11-23 18:58:30 +01:00
commit 1a2640c025
2 changed files with 4 additions and 2 deletions

View file

@ -8,6 +8,8 @@ Security
Security Initiative, Qualcomm Technologies Inc.
* Fix buffer overflow in RSA-PSS verification when the unmasked
data is all zeros.
* Fix unsafe bounds check in ssl_parse_client_psk_identity() when adding
64kB to the address of the SSL buffer wraps around.
Features
* Allow comments in test data files.