lib/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-07-28 00:21:48 +03:00
Code Activity

Correction to migration guide entry wording

Browse Source 
Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
This commit is contained in:
TRodziewicz
2021-05-17 10:43:41 +02:00
parent 1cf33bf94d
commit 57d7ab72fb
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
docs/3.0-migration-guide.d/remove_ssl_record_checking.md
View File

@ -4,10 +4,10 @@ Remove MBEDTLS_SSL_RECORD_CHECKING option and enable its action by default
This change does not affect users who use the default config.h, as the This change does not affect users who use the default config.h, as the
option MBEDTLS_SSL_RECORD_CHECKING was already on by default. option MBEDTLS_SSL_RECORD_CHECKING was already on by default.
This option was added only to control compilation of one function This option was added only to control compilation of one function,
(mbedtls_ssl_check_record()) used in DTLS to check a buffer's validity and mbedtls_ssl_check_record(), which is only useful in some specific cases, so it
authenticity. Switching it off poses a security risk. was made optional to allow users who don't need it to save some code space.
However, the same effect can be achieve by using link-time garbage collection.
For users who changed the default setting of the option there is no real path
of migration.
Users who changed the default setting of the option need to change the config/
build system to remove that change.