)]}'
{
  "commit": "cbfa5ef6d32200e0263de9687fafbe1fa46754a5",
  "tree": "0dfb60e30c7be66452c05c42eb87c0ddb444f998",
  "parents": [
    "2476e43bcf304f61704bb41bfde67dfd862cd091"
  ],
  "author": {
    "name": "Michael Brown",
    "email": "mcb30@ipxe.org",
    "time": "Mon Jul 06 13:43:05 2026 +0100"
  },
  "committer": {
    "name": "Michael Brown",
    "email": "mcb30@ipxe.org",
    "time": "Mon Jul 06 13:43:05 2026 +0100"
  },
  "message": "[tls] Guard against a premature server Finished\n\nA malicious server that immediately sends a Finished record (without\never having sent a ServerHello) will currently cause tls_prf() to get\nstuck in an infinite loop attempting to generate pseudorandom data\nusing the null digest algorithm.\n\nFix by checking that the key schedule digest size is non-zero\n(i.e. that the digest is not the null digest) before attempting to\nprocess the Finished record.\n\nSigned-off-by: Michael Brown \u003cmcb30@ipxe.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "a53f8c871aa76e35817742f914720039bbb785d4",
      "old_mode": 33188,
      "old_path": "src/net/tls.c",
      "new_id": "c5cf92fd84122c756b1fc352318403266952f2aa",
      "new_mode": 33188,
      "new_path": "src/net/tls.c"
    }
  ]
}