Mbed-TLS/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-06-05 21:15:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1483 from ronald-cron-arm/context_load_and_session_load_documentation

Browse Source 
Tighten context/session load and save APIs documentation
This commit is contained in:
Ronald Cron
2026-03-17 14:11:39 +01:00
committed by GitHub
parent d8868c432f ccea2fd244
commit a08cff3d40
2 changed files with 76 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ChangeLog.d/context_load_and_session_load_documentation.txt
+8
View File
@@ -0,0 +1,8 @@
Security
* The documentation of mbedtls_ssl_session_save(),
mbedtls_ssl_session_load(), mbedtls_ssl_context_save(), and
mbedtls_ssl_context_load() has been updated to clarify the responsibility
of the application to preserve the confidentiality and integrity of
serialized data, mitigating the risk of misuse of these APIs.
Credit to Haruto Kimura (Stella) for highlighting risks associated with
tampered serialized data.