Mbed-TLS/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-09-25 03:27:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Correct changelog style

Browse Source 
Signed-off-by: Ben Taylor <[email protected]>
This commit is contained in:
Ben Taylor
2026-06-15 13:27:02 +01:00
parent 84966c1bda
commit 351419f1ff
1 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ChangeLog.d/pkcs-free-stale-pointers.txt
+5 -3
View File
@@ -1,4 +1,6 @@
Security
* Fix a use-after-free/double-free risk in mbedtls_pkcs7_free() when reusing an mbedtls_pkcs7 context
across parse -> free -> parse -> free cycles. The function now resets the context after freeing it,
ensuring stale signed_data.signers.next pointers cannot be walked by a later free operation.
* Fix a use-after-free/double-free risk in mbedtls_pkcs7_free() when reusing
an mbedtls_pkcs7 context across parse -> free -> parse -> free cycles. The
function now resets the context after freeing it, ensuring stale
signed_data.signers.next pointers cannot be walked by a later free
operation.