Reword ChangeLog entry

We do not return failure, but return -1u which is documented as a value
that indicates that the result is not available.

Signed-off-by: David Horstmann <david.horstmann@arm.com>
This commit is contained in:
David Horstmann
2026-02-16 16:18:01 +00:00
parent 607f725563
commit 37e3dcf00d

View File

@@ -1,5 +1,5 @@
Changes
* Harden mbedtls_ssl_get_verify_result() against misuse.
Return failure if the handshake has not yet been attempted. Previously
the result of verification was zero-initialized so the function would
return 0 (indicating success).
If the handshake has not yet been attempted, return -1u to indicate
that the result is not available. Previously the result of verification
was zero-initialized so the function would return 0 (indicating success).