)]}'
{
  "commit": "44e2709cd65fbd2172b9516c79e56f1875f60300",
  "tree": "1ef8956329e4d946c07fa7c630272214af8818dc",
  "parents": [
    "a83cc803b118d5ac675e021bc219397560423764"
  ],
  "author": {
    "name": "Adam Langley",
    "email": "agl@google.com",
    "time": "Thu Jan 08 12:02:28 2015 -0800"
  },
  "committer": {
    "name": "Adam Langley",
    "email": "agl@google.com",
    "time": "Fri Jan 09 19:41:47 2015 +0000"
  },
  "message": "Fix DTLS memory leak.\n\nA memory leak can occur in dtls1_buffer_record if either of the calls to\nssl3_setup_buffers or pqueue_insert fail. The former will fail if there\nis a malloc failure, whilst the latter will fail if attempting to add a\nduplicate record to the queue. This should never happen because\nduplicate records should be detected and dropped before any attempt to\nadd them to the queue. Unfortunately records that arrive that are for\nthe next epoch are not being recorded correctly, and therefore replays\nare not being detected. Additionally, these \"should not happen\" failures\nthat can occur in dtls1_buffer_record are not being treated as fatal and\ntherefore an attacker could exploit this by sending repeated replay\nrecords for the next epoch, eventually causing a DoS through memory\nexhaustion.\n\nThanks to Chris Mueller for reporting this issue and providing initial\nanalysis and a patch. Further analysis and the final patch was performed\nby Matt Caswell from the OpenSSL development team.\n\nCVE-2015-0206\n\n(Imported from upstream\u0027s 7c6a3cf2375f5881ef3f3a58ac0fbd0b4663abd1).\n\nChange-Id: I765fe61c75bc295bcc4ab356b8a5ce88c8964764\nReviewed-on: https://boringssl-review.googlesource.com/2782\nReviewed-by: David Benjamin \u003cdavidben@chromium.org\u003e\nReviewed-by: Adam Langley \u003cagl@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "59fc6f41fe11d36563bffe5158457e9350082779",
      "old_mode": 33188,
      "old_path": "ssl/d1_pkt.c",
      "new_id": "67b06a577a8300034af8fcaa35328090c8938da1",
      "new_mode": 33188,
      "new_path": "ssl/d1_pkt.c"
    }
  ]
}