mbedtls/ChangeLog.d/x509-programs-ip-san.txt
Jeremy Levartovsky 327fca77cb
Keep each IP SAN entry's address in cert_write and cert_req
Every IP entry in the san list pointed at the same buffer, and the list
is only written once all entries are parsed, so san=IP:1.2.3.4;IP:5.6.7.8
produced two copies of 5.6.7.8. Give each IP entry its own buffer and
free it with the rest of the list.

Signed-off-by: Jeremy Levartovsky <140487034+JayOfTheKeyboard@users.noreply.github.com>
2026-10-12 21:37:25 +11:00

7 lines
338 B
Plaintext

Bugfix
* Fix a stack buffer overflow in the cert_write and cert_req sample
programs when an IPv6 address is given in the san parameter. IPv6
addresses are now written correctly.
* Fix the cert_write and cert_req sample programs writing the last IP
address for every IP entry when the san parameter has more than one.