mbedtls/ChangeLog.d/fix-sample-program-memory-errors.txt
Felipe Reyes Murcia 9a45508101 Fix buffer overreads on malformed inputs in sample programs
Fixes #10803.

Signed-off-by: Felipe Reyes Murcia <felipereyesmurcia@gmail.com>
2026-08-02 21:24:34 -04:00

7 lines
374 B
Plaintext

Bugfix
* Fix potential buffer overreads on malformed inputs in sample programs:
ssl_server2 could read past the end of a session ticket shorter than
4 bytes when the dummy_ticket option is enabled, and ssl_context_info
could call strlen() on non-null-terminated ALPN data from the input
file, reading past the end of the decoded buffer. Fixes #10803.