)]}'
{
  "commit": "ed00cfde0fa750f5ecf14ccd11fc4d432ce141a1",
  "tree": "7d6dda1102df56e37d125558f8327a4e5029fe59",
  "parents": [
    "606d3a344dae49672ea567f6719e1fc092a4ae6a"
  ],
  "author": {
    "name": "Rudolf Polzer",
    "email": "rpolzer@google.com",
    "time": "Fri May 08 05:25:26 2026 -0700"
  },
  "committer": {
    "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Mon Jun 22 02:22:05 2026 -0700"
  },
  "message": "crypto/x509: Fix handling of pathLenConstraint on self-issued intermediates.\n\nThe test case that fails before this CL is:\n\n```\n  EXPECT_EQ(X509_V_ERR_PATH_LENGTH_EXCEEDED,\n            VerifyChain({{/*self_issued\u003d*/false, /*pathlen\u003d/0},\n                         {/*self_issued\u003d*/false, /*pathlen\u003d/0},\n                         {/*self_issued\u003d*/true, /*pathlen\u003d/0},\n                         {/*self_issued\u003d*/false, /*pathlen\u003d/1},\n                         {/*self_issued\u003d*/true, /*pathlen\u003d/2}}));\n```\n\nas the path length of the migrating-to (and self-issued) intermediate\ncertificate was ignored.\n\nBug: 525690632\nChange-Id: Id5d74cc3f93156d40db61dc83433e4dc6a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/95067\nCommit-Queue: Rudolf Polzer \u003crpolzer@google.com\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "2401c45612bf1a29fb285c459b1f580bea5ee32a",
      "old_mode": 33188,
      "old_path": "crypto/x509/x509_test.cc",
      "new_id": "4e04c77b1d8576ae3d4921c04460ce3c4ef394e5",
      "new_mode": 33188,
      "new_path": "crypto/x509/x509_test.cc"
    },
    {
      "type": "modify",
      "old_id": "5405038f616ab556c66a53eebb334963d52e0cce",
      "old_mode": 33188,
      "old_path": "crypto/x509/x509_vfy.cc",
      "new_id": "16625babe1453c5ca8a1217a8ed706788f1ac6b2",
      "new_mode": 33188,
      "new_path": "crypto/x509/x509_vfy.cc"
    }
  ]
}