commit e4e4be77bed48deb01e61dff07f2d3231a9b9938
author Manuel Pégourié-Gonnard <mpg2@elzevir.fr> Wed Sep 30 16:30:28 2015 +0200
committer Manuel Pégourié-Gonnard <mpg2@elzevir.fr> Thu Oct 01 18:10:17 2015 +0200
tree fcc6ac67a4232f9dc23f84f5d0597b34e9951081
parent b73ce45b3f87672f5dfcc4e136ae8e9771c5552d

Fix potential overflow in base64_encode

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index d584090..cb0ba22 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -15,6 +15,9 @@
      on crafted PEM input data. Found an fix provided by Guid Vranken.
      Not triggerable remotely in TLS. Triggerable remotely if you accept PEM
      data from an untrusted source.
+   * Fix possible heap buffer overflow in base64_encode() when the input
+     buffer is 512MB or larger on 32-bit platforms.
+     Found by Guido Vranken. Not trigerrable remotely in TLS.
 
 = Version 1.2.16 released 2015-09-17