mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-11-12 09:24:15 +08:00
e0a83c328d
Reject malformed TLS 1.3 serialized sessions instead of accepting unterminated strings or extra trailing data, and reject serialized SSL contexts whose DTLS Connection ID length exceeds the maximum supported size instead of overflowing the internal buffer. Backport of #10715 (development). Signed-off-by: Nadav0077 <18245584+Nadav0077@users.noreply.github.com>
6 lines
281 B
Plaintext
6 lines
281 B
Plaintext
Bugfix
|
|
* Reject malformed TLS 1.3 serialized sessions instead of accepting
|
|
unterminated strings or extra trailing data.
|
|
* Reject serialized SSL contexts whose DTLS Connection ID length exceeds
|
|
the maximum supported size, instead of overflowing the internal buffer.
|