commit 6ca436a4576c6b3a02c05fbfaefd159fd999daf2
author k-stachowiak <krzysiek.stachowiak@gmail.com> Mon Jul 16 12:20:10 2018 +0200
committer k-stachowiak <krzysiek.stachowiak@gmail.com> Mon Jul 16 12:20:10 2018 +0200
tree 71f01a23e2bc8a9f7afbbe5a8224da80dd8f164e
parent dcae78a7a9c0fd83bb26f18e30a19551b132c62f

Update change log

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index 9ee82c6..6aeacf1 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -9,6 +9,10 @@
      a non DER-compliant certificate correctly signed by a trusted CA, or a
      trusted CA with a non DER-compliant certificate. Found by luocm on GitHub.
      Fixes #825.
+   * Fix an issue in the X.509 module which could lead to a buffer overread
+     during certificate extensions parsing. In case of receiving malformed
+     input (extensions length field equal to 0), an illegal read of one byte
+     beyond the input buffer is made. Found and analyzed by Nathan Crandall.
 
 Features
    * Add option MBEDTLS_AES_FEWER_TABLES to dynamically compute 3/4 of the AES tables