)]}'
{
  "commit": "12c5aaae574114cf4883d0e21aa0045b0a606110",
  "tree": "8fecae67451c82e30934dd409b40e87e46f5cc65",
  "parents": [
    "3a098e90902a1c4922490b16d45ee882636a8d38"
  ],
  "author": {
    "name": "Gilles Peskine",
    "email": "Gilles.Peskine@arm.com",
    "time": "Mon Oct 02 14:55:45 2023 +0200"
  },
  "committer": {
    "name": "Gilles Peskine",
    "email": "Gilles.Peskine@arm.com",
    "time": "Mon Oct 02 15:02:10 2023 +0200"
  },
  "message": "Fix buffer overflow in TLS 1.3 ECDH public key parsing\n\nFix a buffer overflow in TLS 1.3 ServerHello and ClientHello parsing. The\nlength of the public key in an ECDH- or FFDH-based key exchange was not\nvalidated. This could result in an overflow of handshake-\u003exxdh_psa_peerkey,\noverwriting further data in the handshake structure or further on the heap.\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "81fa514f675dfd48315e81ccf34d80c1f48b62e4",
      "old_mode": 33188,
      "old_path": "library/ssl_tls13_generic.c",
      "new_id": "dc88c4fdd23b4a9a72abc64d3fc6e978e8cfd2bc",
      "new_mode": 33188,
      "new_path": "library/ssl_tls13_generic.c"
    }
  ]
}
