yuzu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2025-01-10 20:25:47 +00:00
Code Issues Packages Projects Releases Wiki Activity

Reordered extension fields and added to ChangeLog

Browse source 
Reordered the transmission sequence of TLS extension fields in client hello
and added to ChangeLog.
This commit is contained in:
Simon Butcher 2015-10-01 01:17:10 +01:00
parent b1e325d6b2
commit 643a922c56
2 changed files with 15 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
ChangeLog
View file

@ -1,5 +1,15 @@
mbed TLS ChangeLog (Sorted per branch, date)
= mbed TLS 1.3.14 released 2015-10-xx
Security
* Added fix for CVE-2015-xxxxx to prevent heap corruption due to buffer
overflow of the hostname or session ticket. (Found by Guido Vranken)
Changes
* Added checking of hostname length in ssl_set_hostname() to ensure domain
names are compliant with RFC 1035.
= mbed TLS 1.3.13 reladsed 2015-09-17
Security

10
library/ssl_cli.c
View file

@ -75,7 +75,7 @@ static void ssl_write_hostname_ext( ssl_context *ssl,
SSL_DEBUG_MSG( 3, ( "client hello, adding server name extension: %s",
ssl->hostname ) );
if( (size_t)(end - p) < ssl->hostname_len + 9 )
if( end < p || (size_t)( end - p ) < ssl->hostname_len + 9 )
{
SSL_DEBUG_MSG( 1, ( "buffer too small" ) );
return;
@ -877,13 +877,13 @@ static int ssl_write_client_hello( ssl_context *ssl )
ext_len += olen;
#endif
#if defined(POLARSSL_SSL_SESSION_TICKETS)
ssl_write_session_ticket_ext( ssl, p + 2 + ext_len, &olen );
#if defined(POLARSSL_SSL_ALPN)
ssl_write_alpn_ext( ssl, p + 2 + ext_len, &olen );
ext_len += olen;
#endif
#if defined(POLARSSL_SSL_ALPN)
ssl_write_alpn_ext( ssl, p + 2 + ext_len, &olen );
#if defined(POLARSSL_SSL_SESSION_TICKETS)
ssl_write_session_ticket_ext( ssl, p + 2 + ext_len, &olen );
ext_len += olen;
#endif