coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-11-09 14:50:17 +08:00
Code Issues Packages Projects Releases Wiki Activity

Update ChangeLog

Browse Source 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
(cherry picked from commit 4e797c14e0ae62c31f7ae5996dd27888642d11a3)
This commit is contained in:
Ben Taylor 2026-06-02 15:35:08 +01:00
parent b6793c584d
commit dfa25b3577
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
ChangeLog.d/pkcs-free-stale-pointers.txt
View File

@ -1,2 +1,4 @@
Bugfix
* Add fix for stale pointer after mbedtls_pkcs7_free.
Security
* Fix a use-after-free/double-free risk in mbedtls_pkcs7_free() when reusing an mbedtls_pkcs7 context
across parse -> free -> parse -> free cycles. The function now clears the signer list after freeing it,
ensuring stale signed_data.signers.next pointers cannot be walked by a later free operation.