Andres Amaya Garcia 
							
						 
						
							
							
							
							
								
							
							
								ef1329e4af 
								
							 
						 
						
							
							
								
								Fix integer overflows in buffer bound checks  
							
							... 
							
							
							
							Fix potential integer overflows in the following functions:
  * mbedtls_md2_update() to be bypassed and cause
  * mbedtls_cipher_update()
  * mbedtls_ctr_drbg_reseed()
This overflows would mainly be exploitable in 32-bit systems and could
cause buffer bound checks to be bypassed. 
							
						 
						
							2017-02-20 21:49:01 +00:00 
							
								 
							
						 
					 
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
						
							
							
							
							
								
							
							
								37ff14062e 
								
							 
						 
						
							
							
								
								Change main license to Apache 2.0  
							
							
							
						 
						
							2015-09-04 14:21:07 +02:00 
							
								 
							
						 
					 
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
						
							
							
							
							
								
							
							
								6fb8187279 
								
							 
						 
						
							
							
								
								Update date in copyright line  
							
							
							
						 
						
							2015-07-28 17:11:58 +02:00 
							
								 
							
						 
					 
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
						
							
							
							
							
								
							
							
								ccc302692a 
								
							 
						 
						
							
							
								
								Fix bug introduced when splitting init functions  
							
							
							
						 
						
							2015-05-11 14:35:42 +02:00 
							
								 
							
						 
					 
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
						
							
							
							
							
								
							
							
								0a4fb09534 
								
							 
						 
						
							
							
								
								Make xxx_drbg_random() thread-safe  
							
							
							
						 
						
							2015-05-11 14:35:41 +02:00 
							
								 
							
						 
					 
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
						
							
							
							
							
								
							
							
								8d128efd48 
								
							 
						 
						
							
							
								
								Split mbedtls_ctr_drbg_init() -> seed()  
							
							
							
						 
						
							2015-04-28 22:38:08 +02:00 
							
								 
							
						 
					 
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
						
							
							
							
							
								
							
							
								2cf5a7c98e 
								
							 
						 
						
							
							
								
								The Great Renaming  
							
							... 
							
							
							
							A simple execution of tmp/invoke-rename.pl 
							
						 
						
							2015-04-08 13:25:31 +02:00 
							
								 
							
						 
					 
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
						
							
							
							
							
								
							
							
								932e3934bd 
								
							 
						 
						
							
							
								
								Fix typos & Co  
							
							
							
						 
						
							2015-04-03 18:46:55 +02:00 
							
								 
							
						 
					 
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
						
							
							
							
							
								
							
							
								57a26da593 
								
							 
						 
						
							
							
								
								Merge branch 'mbedtls-1.3' into development  
							
							... 
							
							
							
							* mbedtls-1.3:
  Use link-time garbage collection in memory.sh
  scripts/memory.sh only work on Linux
  Add missing 'const' on selftest data
  Use only headers for doxygen (no doc in C files)
  Add missing extern "C" guard in aesni.h
  Fix compile error with renego disabled
  Remove slow PKCS5 test
  Stop checking key-cert match systematically
  Make tests/*.sh runnable from anywhere
  Update visual C files 
							
						 
						
							2015-03-11 10:30:21 +00:00 
							
								 
							
						 
					 
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
						
							
							
							
							
								
							
							
								28122e4329 
								
							 
						 
						
							
							
								
								Add missing 'const' on selftest data  
							
							
							
						 
						
							2015-03-11 09:13:42 +00:00 
							
								 
							
						 
					 
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
						
							
							
							
							
								
							
							
								7f8099773e 
								
							 
						 
						
							
							
								
								Rename include directory to mbedtls  
							
							
							
						 
						
							2015-03-10 11:23:56 +00:00 
							
								 
							
						 
					 
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
						
							
							
							
							
								
							
							
								fe44643b0e 
								
							 
						 
						
							
							
								
								Rename website and repository  
							
							
							
						 
						
							2015-03-06 13:17:10 +00:00 
							
								 
							
						 
					 
				
					
						
							
							
								Rich Evans 
							
						 
						
							
							
							
							
								
							
							
								00ab47026b 
								
							 
						 
						
							
							
								
								cleanup library and some basic tests. Includes, add guards to includes  
							
							
							
						 
						
							2015-02-10 11:28:46 +00:00 
							
								 
							
						 
					 
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
						
							
							
							
							
								
							
							
								860b51642d 
								
							 
						 
						
							
							
								
								Fix url again  
							
							
							
						 
						
							2015-01-28 17:12:07 +00:00 
							
								 
							
						 
					 
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
						
							
							
							
							
								
							
							
								085ab040aa 
								
							 
						 
						
							
							
								
								Fix website url to use https.  
							
							
							
						 
						
							2015-01-23 11:06:27 +00:00 
							
								 
							
						 
					 
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
						
							
							
							
							
								
							
							
								9698f5852c 
								
							 
						 
						
							
							
								
								Remove maintainer line.  
							
							
							
						 
						
							2015-01-23 10:59:00 +00:00 
							
								 
							
						 
					 
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
						
							
							
							
							
								
							
							
								19f6b5dfaa 
								
							 
						 
						
							
							
								
								Remove redundant "all rights reserved"  
							
							
							
						 
						
							2015-01-23 10:54:00 +00:00 
							
								 
							
						 
					 
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
						
							
							
							
							
								
							
							
								a658a4051b 
								
							 
						 
						
							
							
								
								Update copyright  
							
							
							
						 
						
							2015-01-23 09:55:24 +00:00 
							
								 
							
						 
					 
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
						
							
							
							
							
								
							
							
								967a2a5f8c 
								
							 
						 
						
							
							
								
								Change name to mbed TLS in the copyright notice  
							
							
							
						 
						
							2015-01-22 14:28:16 +00:00 
							
								 
							
						 
					 
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
						
							
							
							
							
								
							
							
								5cb4b31057 
								
							 
						 
						
							
							
								
								Fix missing bound check  
							
							
							
						 
						
							2015-01-13 14:58:00 +01:00 
							
								 
							
						 
					 
				
					
						
							
							
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								fff0366bba 
								
							 
						 
						
							
							
								
								Add ctr_drbg_free()  
							
							
							
						 
						
							2014-07-09 10:19:23 +02:00 
							
								 
							
						 
					 
				
					
						
							
							
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								c7ea99af4f 
								
							 
						 
						
							
							
								
								Add _init() and _free() for cipher modules  
							
							
							
						 
						
							2014-07-09 10:19:22 +02:00 
							
								 
							
						 
					 
				
					
						
							
							
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								66d5d076f7 
								
							 
						 
						
							
							
								
								Fix formatting in various code to match spacing from coding style  
							
							
							
						 
						
							2014-06-17 17:06:47 +02:00 
							
								 
							
						 
					 
				
					
						
							
							
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								b9e4e2c97a 
								
							 
						 
						
							
							
								
								Fix formatting: fix some 'easy' > 80 length lines  
							
							
							
						 
						
							2014-05-01 14:18:25 +02:00 
							
								 
							
						 
					 
				
					
						
							
							
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								9af723cee7 
								
							 
						 
						
							
							
								
								Fix formatting: remove trailing spaces, #endif with comments (> 10 lines)  
							
							
							
						 
						
							2014-05-01 13:03:14 +02:00 
							
								 
							
						 
					 
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
						
							
							
							
							
								
							
							
								cef4ad2509 
								
							 
						 
						
							
							
								
								Adapt sources to configurable config.h name  
							
							
							
						 
						
							2014-04-30 16:40:20 +02:00 
							
								 
							
						 
					 
				
					
						
							
							
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								4c284c9141 
								
							 
						 
						
							
							
								
								Removed LCOV directives from code  
							
							
							
						 
						
							2014-03-26 15:33:05 +01:00 
							
								 
							
						 
					 
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
						
							
							
							
							
								
							
							
								9592485d0c 
								
							 
						 
						
							
							
								
								Fix some MSVC12 conversion warnings  
							
							
							
						 
						
							2014-03-21 12:03:07 +01:00 
							
								 
							
						 
					 
				
					
						
							
							
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								7dc4c44267 
								
							 
						 
						
							
							
								
								Library files moved to use platform layer  
							
							
							
						 
						
							2014-02-06 13:20:16 +01:00 
							
								 
							
						 
					 
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
						
							
							
							
							
								
							
							
								446ee6618f 
								
							 
						 
						
							
							
								
								Add LCOV_EXCLUDE_LINE on some IO errors  
							
							
							
						 
						
							2014-02-01 10:08:26 +01:00 
							
								 
							
						 
					 
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
						
							
							
							
							
								
							
							
								b3b205e081 
								
							 
						 
						
							
							
								
								Clean up details in ctr_drbg_selftest()  
							
							
							
						 
						
							2014-01-31 12:04:06 +01:00 
							
								 
							
						 
					 
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
						
							
							
							
							
								
							
							
								7c59363a85 
								
							 
						 
						
							
							
								
								Remove a few dead stores  
							
							
							
						 
						
							2014-01-22 13:02:39 +01:00 
							
								 
							
						 
					 
				
					
						
							
							
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								b9cfaa0c7f 
								
							 
						 
						
							
							
								
								Explicit conversions and minor changes to prevent MSVC compiler warnings  
							
							
							
						 
						
							2013-10-14 15:50:40 +02:00 
							
								 
							
						 
					 
				
					
						
							
							
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								18f0341aed 
								
							 
						 
						
							
							
								
								Typo in comments in ctr_drbg.c  
							
							
							
						 
						
							2013-09-11 11:05:56 +02:00 
							
								 
							
						 
					 
				
					
						
							
							
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								534f82c77a 
								
							 
						 
						
							
							
								
								Made ctr_drbg_init_entropy_len() non-static and defined  
							
							
							
						 
						
							2013-06-25 16:47:55 +02:00 
							
								 
							
						 
					 
				
					
						
							
							
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								b6c5d2e1a6 
								
							 
						 
						
							
							
								
								Cleanup up non-prototyped functions (static) and const-correctness  
							
							... 
							
							
							
							More fixes based on the compiler directives -Wcast-qual -Wwrite-strings
-Wmissing-prototypes -Wmissing-declarations. Not everything with regards
to -Wcast-qual has been fixed as some have unwanted consequences for the
rest of the code. 
							
						 
						
							2013-06-25 16:25:17 +02:00 
							
								 
							
						 
					 
				
					
						
							
							
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								c72d3f7d85 
								
							 
						 
						
							
							
								
								Possible resource leak on FILE* removed in CTR_DRBG  
							
							
							
						 
						
							2013-05-14 13:22:41 +02:00 
							
								 
							
						 
					 
				
					
						
							
							
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								9a73632fd9 
								
							 
						 
						
							
							
								
								- Merged changesets 1399 up to and including 1415 into 1.2 branch  
							
							
							
						 
						
							2012-11-14 12:39:52 +00:00 
							
								 
							
						 
					 
				
					
						
							
							
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								369e14bbf1 
								
							 
						 
						
							
							
								
								- Small code rewrite  
							
							
							
						 
						
							2012-04-18 14:16:09 +00:00 
							
								 
							
						 
					 
				
					
						
							
							
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								e88186d2ff 
								
							 
						 
						
							
							
								
								- Fixed selftest for CTR_DRBG  
							
							
							
						 
						
							2012-01-22 20:29:47 +00:00 
							
								 
							
						 
					 
				
					
						
							
							
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								69e095cc15 
								
							 
						 
						
							
							
								
								- Changed the behaviour of x509parse_parse_crt for permissive parsing. Now returns the number of 'failed certificates' instead of having a switch to enable it.  
							
							... 
							
							
							
							- As a consequence all error code that were positive were changed. A lot of MALLOC_FAILED and FILE_IO_ERROR error codes added for different modules.
 - Programs and tests were adapted accordingly 
							
						 
						
							2011-12-10 21:55:01 +00:00 
							
								 
							
						 
					 
				
					
						
							
							
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								18d32911c0 
								
							 
						 
						
							
							
								
								- Added internal ctr_drbg_init_entropy_len() to allow NIST determined entropy tests to work  
							
							
							
						 
						
							2011-12-10 21:42:49 +00:00 
							
								 
							
						 
					 
				
					
						
							
							
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								fc754a9178 
								
							 
						 
						
							
							
								
								- Addedd writing and updating of seedfiles as functions to CTR_DRBG  
							
							
							
						 
						
							2011-12-05 13:23:51 +00:00 
							
								 
							
						 
					 
				
					
						
							
							
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								1bc9efc00a 
								
							 
						 
						
							
							
								
								- Fixed const correctness  
							
							... 
							
							
							
							- Added ctr_drbg_update for non-fixed data lengths
 - Fixed void pointer arithmetic 
							
						 
						
							2011-12-03 11:29:32 +00:00 
							
								 
							
						 
					 
				
					
						
							
							
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								23fd5ea667 
								
							 
						 
						
							
							
								
								- Fixed a potential loop bug  
							
							
							
						 
						
							2011-11-29 15:56:12 +00:00 
							
								 
							
						 
					 
				
					
						
							
							
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								2bc7cf16fe 
								
							 
						 
						
							
							
								
								- Cleaned up and further documented CTR_DRBG code  
							
							
							
						 
						
							2011-11-29 10:50:51 +00:00 
							
								 
							
						 
					 
				
					
						
							
							
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								0e04d0e9a3 
								
							 
						 
						
							
							
								
								- Added CTR_DRBG based on AES-256-CTR (NIST SP 800-90) random generator  
							
							
							
						 
						
							2011-11-27 14:46:59 +00:00