Files
mbedtls/ChangeLog.d/serialized-data-load-hardening.txt

5 lines
211 B
Plaintext

Bugfix
* Reject serialized TLS 1.2 sessions whose session ID length exceeds 32,
instead of accepting an out-of-range length that is later used to read
past the end of the 32-byte session ID buffer.