commit 351c4f15f40e3131b3a5dcfde83a3f465cad3344
author Simon Butcher <simon.butcher@arm.com> Sun Oct 28 16:32:05 2018 +0000
committer Simon Butcher <simon.butcher@arm.com> Sun Oct 28 16:32:05 2018 +0000
tree 3d50cbe0bd390b64280f0d48ed0eb89b76b67fe7
parent 34f32fa93c38c300284af3117b0da83e6e757dd5
parent c2a1dd98d5047851282e11f464ba59981a625b38

Merge remote-tracking branch 'public/pr/2113' into mbedtls-2.1-proposed

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index 6268dfb..6e79644 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -9,6 +9,9 @@
      invalidated keys of a lifetime of less than a 1s. Fixes #1968.
    * Fix potential build failures related to the 'apidoc' target, introduced
      in the previous patch release. Found by Robert Scheck. #390 #391
+   * Fix a bug in the record decryption routine ssl_decrypt_buf()
+     which lead to accepting properly authenticated but improperly
+     padded records in case of CBC ciphersuites using Encrypt-then-MAC.
 
 Changes
    * "make apidoc" now generates the documentation for the current