Files
mbedtls/ChangeLog.d/fix-asn1-store-named-data.txt
Minos Galanakis 92a2154ed2 Changelog: Split changelogs for both libraries
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-09-26 15:53:04 +01:00

9 lines
447 B
Plaintext

Security
* Fix a bug in tf-psa-crypto's mbedtls_asn1_store_named_data() where it
would sometimes leave an item in the output list in an inconsistent
state with val.p == NULL but val.len > 0. Affected functions used in X.509
would then dereference a NULL pointer. Applications that do not
call this function (directly, or indirectly through X.509 writing) are not
affected. Found by Linh Le and Ngan Nguyen from Calif.