commit 4796c195167929f1143ab6953ef5b1a6dd59d834
author Gilles Peskine <gilles.peskine@arm.com> Tue Apr 28 13:10:40 2020 +0200
committer GitHub <noreply@github.com> Tue Apr 28 13:10:40 2020 +0200
tree 70593b85575934348b98c49874a8b5db9305688c
parent 899f63805a8bcd0849fd1f9c380b4cf77a69f265
parent 08fc4aaec0de0a303572d70c67cf37498720c302

Merge pull request #3283 from gilles-peskine-arm/changelog-20200421-2.16

2.16 only: Add missing changelog entry for PRs since 2.16.6

ChangeLog.d/max_pathlen.txt

diff --git a/ChangeLog.d/max_pathlen.txt b/ChangeLog.d/max_pathlen.txt
new file mode 100644
index 0000000..4ebf0ad
--- /dev/null
+++ b/ChangeLog.d/max_pathlen.txt
@@ -0,0 +1,5 @@
+Bugfix
+   * Fix undefined behavior in X.509 certificate parsing if the
+     pathLenConstraint basic constraint value is equal to INT_MAX.
+     The actual effect with almost every compiler is the intended
+     behavior, so this is unlikely to be exploitable anywhere. #3197