Naveed c2c8d1e142 Reject out-of-bounds ALPN length in ssl_context_load ... The serialized ALPN length was passed to memcmp() against each configured protocol without checking it against the remaining serialized data, so a malformed context could read past the end of the buffer. Bound it before the comparison, like the adjacent CID fields. Signed-off-by: Naveed <naveed@bugqore.com>		2026-09-22 17:23:31 +05:30
..
00README.md	scripts: fix paths for files moved to framework	2025-01-08 09:59:18 +01:00
cmake-config.txt	CMake: separate base config	2026-08-14 15:08:42 +01:00
serialized-data-load-hardening.txt	Reject out-of-bounds session ID length in ssl_tls12_session_load	2026-07-09 13:07:44 +05:30
ssl-context-load-alpn-bounds.txt	Reject out-of-bounds ALPN length in ssl_context_load	2026-09-22 17:23:31 +05:30