Add ChangeLog entry for verify_result hardening

Signed-off-by: David Horstmann <[email protected]>
2026-09-07 10:59:54 +00:00 · 2026-02-17 14:39:53 +00:00
parent b413935518
commit 6ca2d7da8b
1 changed files with 5 additions and 0 deletions
@@ -0,0 +1,5 @@
+Changes
+   * Harden mbedtls_ssl_get_verify_result() against misuse.
+     Return failure if the handshake has not yet been attempted. Previously
+     the result of verification was zero-initialized so the function would
+     return 0 (indicating success).