Suyu/mbedtls
1
0
Fork 0
mirror of https://git.suyu.dev/suyu/mbedtls.git synced 2026-01-08 23:49:24 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge branch 'iotssl-517-double-free-restricted' into development-restricted

Browse source 
* iotssl-517-double-free-restricted:
  Fix potential double-free in ssl_conf_psk()
This commit is contained in:
Manuel Pégourié-Gonnard 2015-11-02 11:03:32 +09:00
commit f8b2442e2f
2 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
ChangeLog
View file

@ -3,6 +3,9 @@ mbed TLS ChangeLog (Sorted per branch, date)
= mbed TLS 2.2.0 released 2015-10-xx
Security
* Fix potential double free if mbedtls_ssl_conf_psk() is called more than
once and some allocation fails. Cannot be forced remotely. Found by Guido
Vranken, Intelworks.
* The X509 max_pathlen constraint was not enforced on intermediate
certificates. Found by Nicholas Wilson, fix and tests provided by
Janos Follath. #280 and #319