From a958a014007012fbb5943205d8eea7d2a5280df2 Mon Sep 17 00:00:00 2001 From: Gilles Peskine Date: Tue, 28 Apr 2020 12:14:32 +0200 Subject: [PATCH] Add changelog entry for #3196: x509_crt max_pathlen int overflow fix Backport of #3192 Signed-off-by: Gilles Peskine --- ChangeLog.d/max_pathlen.txt | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 ChangeLog.d/max_pathlen.txt diff --git a/ChangeLog.d/max_pathlen.txt b/ChangeLog.d/max_pathlen.txt new file mode 100644 index 000000000..ff56a4e59 --- /dev/null +++ b/ChangeLog.d/max_pathlen.txt @@ -0,0 +1,5 @@ +Bugfix + * Fix undefined behavior in X.509 certificate parsing if the + pathLenConstraint basic constraint value is equal to INT_MAX. + The actual effect with almost every compiler is the intended + behavior, so this is unlikely to be exploitable anywhere. #3196