Add changelog entry for Mbed-TLS#3197: x509_crt max_pathlen int overf…

…low fix Backport of Mbed-TLS#3192 Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
gilles-peskine-arm · Apr 28, 2020 · 08fc4aa · 08fc4aa
1 parent f0b343c
commit 08fc4aa
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/ChangeLog.d/max_pathlen.txt b/ChangeLog.d/max_pathlen.txt
@@ -0,0 +1,5 @@
+Bugfix
+   * Fix undefined behavior in X.509 certificate parsing if the
+     pathLenConstraint basic constraint value is equal to INT_MAX.
+     The actual effect with almost every compiler is the intended
+     behavior, so this is unlikely to be exploitable anywhere. #3197