commit 08485cca81a1a86577489d04875370690027a7cf
author Manuel Pégourié-Gonnard <mpg@elzevir.fr> Wed Jun 18 23:11:34 2014 +0200
committer Paul Bakker <p.j.bakker@polarssl.org> Wed Jun 25 11:26:12 2014 +0200
tree 2a9307010f58c0537e49e3ef4ff4b471291bbf44
parent 8920f69fef08bce1f445160f52730fd067f1f516

Fix SSL_BUFFER_LEN

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index ae1a572..e554f8d 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -34,9 +34,13 @@
    * Fix symlink command for cross compiling with CMake (found by Andre
      Heinecke)
    * Fix DER output of gen_key app (found by Gergely Budai)
-   * Very small packets were incorrectly rejected when truncated HMAC was in
+   * Very small records were incorrectly rejected when truncated HMAC was in
      use with some ciphersuites and versions (RC4 in all versions, CBC with
      versions < TLS 1.1).
+   * Very large records using more than 224 bytes of padding were incorrectly
+     rejected with CBC-based ciphersuites and TLS >= 1.1
+   * Very large records using less padding could cause a buffer overread of up
+     to 32 bytes with CBC-based ciphersuites and TLS >= 1.1
 
 = PolarSSL 1.3.7 released on 2014-05-02
 Features