Naveed 6cffad7e1b rework handshake length checks per review ... ClientHello: narrow the session-id check to the session id itself, check the cookie length byte before reading it, and let the ciphersuite-list length check cover both transports. CertificateRequest: make the signature-algorithms check also reserve the two certificate-authorities length bytes instead of adding a separate check, use the available < needed pattern throughout, and reject an odd-length signature-algorithms list. Add injected truncated-ClientHello test cases (TLS 1.2-only builds). Signed-off-by: Naveed <naveed@bugqore.com>		2026-08-24 21:58:01 +05:30
..
00README.md	scripts: fix paths for files moved to framework	2025-01-08 10:03:49 +01:00
mbedtls_gcc_version.txt	library/alignment.h: Fix 'MBEDTLS_GCC_VERSION' is not defined error	2026-06-15 17:05:38 +08:00
serialized-data-load-hardening.txt	Reject out-of-bounds session ID length in ssl_tls12_session_load	2026-08-03 13:45:52 +05:30
tls12-handshake-length-read-bounds.txt	rework handshake length checks per review	2026-08-24 21:58:01 +05:30