Add ChangeLog entry for FFDH buffer overflow fix

Signed-off-by: David Horstmann <[email protected]>
This commit is contained in:
David Horstmann
2026-03-10 09:05:37 +00:00
parent 01bcc1f754
commit a749c3a5f8
@@ -0,0 +1,7 @@
Security
* Fix a buffer overflow in psa_export_public_key() for FFDH keys.
Previously we calculated the key length and wrote that much data to the
output buffer, regardless of the output buffer length. Fix this by always
checking that the key length is less than the output buffer length before
performing the copy and return PSA_ERROR_BUFFER_TOO_SMALL if the output
buffer is too small.