Add changelog entry for Mbed-TLS#3192: x509_crt max_pathlen int overf…

…low fix Signed-off-by: Gilles Peskine <[email protected]>
gilles-peskine-arm · Apr 21, 2020 · e7a5386 · e7a5386
1 parent 5cac337
commit e7a5386
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/ChangeLog.d/max_pathlen.txt b/ChangeLog.d/max_pathlen.txt
@@ -0,0 +1,5 @@
+Bugfix
+   * Fix undefined behavior in X.509 certificate parsing if the
+     pathLenConstraint basic constraint value is equal to INT_MAX.
+     The actual effect with almost every compiler is the intended
+     behavior, so this is unlikely to be exploitable anywhere. #3192