Naveed 5ece3de4d2 Reject out-of-bounds ALPN length in ssl_context_load ... The serialized ALPN length was passed to memcmp() against each configured protocol without checking it against the remaining serialized data, so a malformed context could read past the end of the buffer. Bound it before the comparison, like the adjacent CID fields. Signed-off-by: Naveed <naveed@bugqore.com>		2026-10-04 22:44:49 +05:30
..
00README.md	scripts: fix paths for files moved to framework	2025-01-08 09:59:18 +01:00
cmake-config.txt	CMake: separate base config	2026-08-27 12:34:42 +02:00
serialized-data-load-hardening.txt	Reject out-of-bounds session ID length in ssl_tls12_session_load	2026-08-03 13:44:23 +05:30
ssl-context-load-alpn-bounds.txt	Reject out-of-bounds ALPN length in ssl_context_load	2026-10-04 22:44:49 +05:30