mbedtls/ChangeLog.d
Naveed 8a69d73b79 rework handshake length checks per review
ClientHello: narrow the session-id check to the session id itself, check
the cookie length byte before reading it, and let the ciphersuite-list
length check cover both transports.

CertificateRequest: make the signature-algorithms check also reserve the
two certificate-authorities length bytes instead of adding a separate
check, use the available < needed pattern throughout, and reject an
odd-length signature-algorithms list.

Add injected truncated-ClientHello test cases (TLS 1.2-only builds).

Signed-off-by: Naveed <naveed@bugqore.com>
2026-08-24 21:52:19 +05:30
..
00README.md scripts: fix paths for files moved to framework 2025-01-08 09:59:18 +01:00
serialized-data-load-hardening.txt Reject out-of-bounds session ID length in ssl_tls12_session_load 2026-08-03 13:44:23 +05:30
tls12-handshake-length-read-bounds.txt rework handshake length checks per review 2026-08-24 21:52:19 +05:30