From e7a5386eb9c1431a7b0e18398f48a5300fc7367a Mon Sep 17 00:00:00 2001 From: Gilles Peskine Date: Tue, 21 Apr 2020 19:37:06 +0200 Subject: [PATCH] Add changelog entry for #3192: x509_crt max_pathlen int overflow fix Signed-off-by: Gilles Peskine --- ChangeLog.d/max_pathlen.txt | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 ChangeLog.d/max_pathlen.txt diff --git a/ChangeLog.d/max_pathlen.txt b/ChangeLog.d/max_pathlen.txt new file mode 100644 index 0000000000..08f9c65a80 --- /dev/null +++ b/ChangeLog.d/max_pathlen.txt @@ -0,0 +1,5 @@ +Bugfix + * Fix undefined behavior in X.509 certificate parsing if the + pathLenConstraint basic constraint value is equal to INT_MAX. + The actual effect with almost every compiler is the intended + behavior, so this is unlikely to be exploitable anywhere. #3192