)]}'
{
  "commit": "5d0f79b0ed2bf3267d67bcb3947a0ab7d6836bb1",
  "tree": "f142f9df2986edcd35d3243f45a77a75e71ff7b0",
  "parents": [
    "85fecaff673714928b9ff0b064f1d072b78736ec"
  ],
  "author": {
    "name": "Kazuho Oku",
    "email": "kazuhooku@gmail.com",
    "time": "Mon Jun 22 20:48:51 2026 +0900"
  },
  "committer": {
    "name": "Kazuho Oku",
    "email": "kazuhooku@gmail.com",
    "time": "Mon Jun 22 20:48:51 2026 +0900"
  },
  "message": "Reject ECH payloads shorter than the AEAD tag\n\nWhen the server has opened an ECH AEAD context, validate the payload length before subtracting the tag size for the inner ClientHello allocation. Too-short payloads are malformed input and should fail with a decode alert rather than reaching the allocation path.\n\nCo-authored-by: Codex \u003ccodex@openai.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "d2da8dda6a877279c8e83e610ab09cdefafe135a",
      "old_mode": 33188,
      "old_path": "lib/picotls.c",
      "new_id": "027832222e612f4514fc411a2f12ff9a51083cd5",
      "new_mode": 33188,
      "new_path": "lib/picotls.c"
    }
  ]
}