Fix potential double-free in ssl_conf_psk()

2026-03-26 13:09:30 +00:00 · 2015-10-20 19:56:45 +02:00
parent c8cd2c6577
commit 173c790722
2 changed files with 9 additions and 0 deletions
--- a/7
+++ b/7
@@ -1,5 +1,12 @@
 mbed TLS ChangeLog (Sorted per branch, date)

+= mbed TLS 2.2.0 released 2015-10-xx
+
+Security
+   * Fix potential double free if mbedtls_ssl_conf_psk() is called more than
+     once and some allocation fails. Cannot be forced remotely. Found by Guido
+     Vranken, Intelworks.
+
 = mbed TLS 2.1.2 released 2015-10-06

 Security