commit 6220ecbc485ffb935225bab298d7f707c33bacfa
author Andres AG <andres.amayagarcia@arm.com> Mon Sep 26 14:53:05 2016 +0100
committer Simon Butcher <simon.butcher@arm.com> Thu Oct 13 15:43:46 2016 +0100
tree 81fe43ed79a52d172e9a10fc3eb5733bef42c478
parent 8390e0a97c18da6284f2888b61ddca6cac5ac192

Fix overread when verifying SERVER_HELLO in DTLS

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index 1e882ef..def7e6d 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -25,6 +25,8 @@
    * Fix documentation and implementation missmatch for function arguments of
      mbedtls_gcm_finish(). Found by cmiatpaar. #602
    * Guarantee that P>Q at RSA key generation. Found by inestlerode. #558
+   * Fix potential byte overread when verifying malformed SERVER_HELLO in
+     ssl_parse_hello_verify_request() for DTLS. Found by Guido Vranken.
 
 = mbed TLS 2.1.5 branch released 2016-06-28