From 08fc4aaec0de0a303572d70c67cf37498720c302 Mon Sep 17 00:00:00 2001 From: Gilles Peskine Date: Tue, 28 Apr 2020 12:13:10 +0200 Subject: [PATCH] Add changelog entry for #3197: x509_crt max_pathlen int overflow fix Backport of #3192 Signed-off-by: Gilles Peskine --- ChangeLog.d/max_pathlen.txt | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 ChangeLog.d/max_pathlen.txt diff --git a/ChangeLog.d/max_pathlen.txt b/ChangeLog.d/max_pathlen.txt new file mode 100644 index 000000000..4ebf0ad93 --- /dev/null +++ b/ChangeLog.d/max_pathlen.txt @@ -0,0 +1,5 @@ +Bugfix + * Fix undefined behavior in X.509 certificate parsing if the + pathLenConstraint basic constraint value is equal to INT_MAX. + The actual effect with almost every compiler is the intended + behavior, so this is unlikely to be exploitable anywhere. #3197