yuzu-emu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-11-22 11:55:42 +01:00
Code Issues Packages Projects Releases Wiki Activity

Tune description of a change/bugfix in ChangeLog

Browse Source
This commit is contained in:
Manuel Pégourié-Gonnard 2016-01-04 17:36:44 +01:00
parent 6e7d3d5462
commit 7f88b8ec86
1 changed files with 6 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
ChangeLog
View File

@ -13,16 +13,13 @@ Bugfix
* Fix bug in certificate validation that caused valid chains to be rejected * Fix bug in certificate validation that caused valid chains to be rejected
when the first intermediate certificate has pathLenConstraint=0. Found by when the first intermediate certificate has pathLenConstraint=0. Found by
Nicholas Wilson. Introduced in mbed TLS 2.2.0. #280 Nicholas Wilson. Introduced in mbed TLS 2.2.0. #280
* Removed potential leak in mbedtls_rsa_rsassa_pkcs1_v15_sign(), found by * Removed potential leak in mbedtls_rsa_rsassa_pkcs1_v15_sign(), found by
JayaraghavendranK. #372 JayaraghavendranK. #372
* Fix suboptimal handling of unexpected records that caused interop issues
Change with some peers over unreliable links. Avoid dropping an entire DTLS
* To avoid dropping an entire DTLS datagram if a single record in a datagram datagram if a single record in a datagram is unexpected, instead only
is invalid, we now only drop the record and look at subsequent records (if drop the record and look at subsequent records (if any are present) in
any are presemt) in the same datagram to avoid interoperability issues. the same datagram. Found by jeannotlapin. #345
Previously the library was dropping the entire datagram. Where a record is
unexpected, the function mbedtls_ssl_read_record() will now return
MBEDTLS_ERR_SSL_UNEXPECTED_RECORD.
= mbed TLS 2.2.0 released 2015-11-04 = mbed TLS 2.2.0 released 2015-11-04