commit 215a14bf29c5eac125ab986adefa37bb4fbc5284
author Manuel Pégourié-Gonnard <mpg@elzevir.fr> Wed Oct 21 10:16:29 2015 +0200
committer Manuel Pégourié-Gonnard <mpg2@elzevir.fr> Tue Oct 27 11:47:37 2015 +0100
tree 95583cd1d2459f2ab5173a9deb9fc628655da858
parent 9c521767760d2a3edba4e133e69b1910d79311c9

Fix potential heap corruption on Windows

If len is large enough, when cast to an int it will be negative and then the
test if( len > MAX_PATH - 3 ) will not behave as expected.

Ref: IOTSSL-518

backport of 261faed725e29bd34abbf1f95df5fab43791f40c

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index 78664d0..b459887 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -6,6 +6,9 @@
    * Fix potential double free if ssl_set_psk() is called more than once and
      some allocation fails. Cannot be forced remotely. Found by Guido Vranken,
      Intelworks.
+   * Fix potential heap corruption on Windows when
+     x509_crt_parse_path() is passed a path longer than 2GB. Cannot be
+     triggered remotely. Found by Guido Vranken, Interlworks.
 
 = mbed TLS 1.3.14 released 2015-10-06