From a749c3a5f83f0ce1e9b7731cbb13d6f16ac0b555 Mon Sep 17 00:00:00 2001 From: David Horstmann Date: Thu, 26 Feb 2026 14:56:01 +0000 Subject: [PATCH] Add ChangeLog entry for FFDH buffer overflow fix Signed-off-by: David Horstmann --- ChangeLog.d/fix-psa-ffdh-buffer-overflow.txt | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 ChangeLog.d/fix-psa-ffdh-buffer-overflow.txt diff --git a/ChangeLog.d/fix-psa-ffdh-buffer-overflow.txt b/ChangeLog.d/fix-psa-ffdh-buffer-overflow.txt new file mode 100644 index 0000000000..0c33742bab --- /dev/null +++ b/ChangeLog.d/fix-psa-ffdh-buffer-overflow.txt @@ -0,0 +1,7 @@ +Security + * Fix a buffer overflow in psa_export_public_key() for FFDH keys. + Previously we calculated the key length and wrote that much data to the + output buffer, regardless of the output buffer length. Fix this by always + checking that the key length is less than the output buffer length before + performing the copy and return PSA_ERROR_BUFFER_TOO_SMALL if the output + buffer is too small.