Naveed 258bbbbdb0 Fix out-of-bounds write in mbedtls_ssl_cookie_write ... mbedtls_ssl_cookie_write() only reserves COOKIE_HMAC_LEN bytes for the MAC after the timestamp, but passed COOKIE_MD_OUTLEN as the output size to psa_mac_sign_finish(). PSA fills the unused part of the declared output buffer, so up to 4 bytes (20 with SHA-384) past the end of the caller's buffer were overwritten when it had less than that to spare. Pass the size that was actually reserved and add a regression test. Signed-off-by: Naveed <naveed@bugqore.com>		2026-10-16 19:28:28 +05:30
..
00README.md	scripts: fix paths for files moved to framework	2025-01-08 09:59:18 +01:00
cert-write-der-windows.txt	Add changelog for DER certificate output fix	2026-10-06 12:34:53 +05:30
cmake-config.txt	CMake: separate base config	2026-08-14 15:08:42 +01:00
numeric-oid-overflow.txt	Reject overflowing numeric OID components	2026-08-10 02:38:16 +03:00
serialized-data-load-hardening.txt	Reject out-of-bounds session ID length in ssl_tls12_session_load	2026-07-09 13:07:44 +05:30
ssl-context-load-alpn-bounds.txt	Reject out-of-bounds ALPN length in ssl_context_load	2026-09-22 17:23:31 +05:30
ssl-cookie-write-bounds.txt	Fix out-of-bounds write in mbedtls_ssl_cookie_write	2026-10-16 19:28:28 +05:30