Fix overread when verifying SERVER_HELLO in DTLS

This commit is contained in:
Andres AG 2016-09-26 14:53:05 +01:00
parent 93012e8bce
commit 5a87c9375d
2 changed files with 11 additions and 0 deletions

View file

@ -29,6 +29,8 @@ Bugfix
a contribution from Tobias Tangemann. #541
* Fixed cert_app sample program for debug output and for use when no root
certificates are provided.
* Fix potential byte overread when verifying malformed SERVER_HELLO in
ssl_parse_hello_verify_request() for DTLS. Found by Guido Vranken.
Changes
* Extended test coverage of special cases, and added new timing test suite.