mirror of
https://github.com/yuzu-emu/mbedtls.git
synced 2025-10-29 21:57:44 +00:00
ea7eab1fde
Before this commit, if a certificate only had one issue (for example, if the "untrusted" bit was the only set in flags), an attacker that could flip this single bit between the moment it's set and the moment flags are checked before returning from mbedtls_x509_crt_verify() could make the entire verification routine appear to succeed (return 0 with no bit set in flags). Avoid that by making sure that flags always has either 0 or at least 9 bits set during the execution of the function. However, to preserve the API, clear the 8 extra bits before returning. This doesn't open the door to other attacks, as fortunately the API already had redundancy: either both flags and the return value are 0, or flags has bits set and the return value is non-zero with at least 16 bits set (assuming 32-bit 2-complement ints). |
||
|---|---|---|
| .. | ||
| aes.h | ||
| aesni.h | ||
| arc4.h | ||
| aria.h | ||
| asn1.h | ||
| asn1write.h | ||
| base64.h | ||
| bignum.h | ||
| blowfish.h | ||
| bn_mul.h | ||
| camellia.h | ||
| ccm.h | ||
| certs.h | ||
| chacha20.h | ||
| chachapoly.h | ||
| check_config.h | ||
| cipher.h | ||
| cipher_internal.h | ||
| cmac.h | ||
| compat-1.3.h | ||
| config.h | ||
| ctr_drbg.h | ||
| debug.h | ||
| des.h | ||
| dhm.h | ||
| ecdh.h | ||
| ecdsa.h | ||
| ecjpake.h | ||
| ecp.h | ||
| ecp_internal.h | ||
| entropy.h | ||
| entropy_poll.h | ||
| error.h | ||
| gcm.h | ||
| havege.h | ||
| hkdf.h | ||
| hmac_drbg.h | ||
| md.h | ||
| md2.h | ||
| md4.h | ||
| md5.h | ||
| md_internal.h | ||
| memory_buffer_alloc.h | ||
| net.h | ||
| net_sockets.h | ||
| nist_kw.h | ||
| oid.h | ||
| padlock.h | ||
| pem.h | ||
| pk.h | ||
| pk_internal.h | ||
| pkcs5.h | ||
| pkcs11.h | ||
| pkcs12.h | ||
| platform.h | ||
| platform_time.h | ||
| platform_util.h | ||
| poly1305.h | ||
| ripemd160.h | ||
| rsa.h | ||
| rsa_internal.h | ||
| sha1.h | ||
| sha256.h | ||
| sha512.h | ||
| ssl.h | ||
| ssl_cache.h | ||
| ssl_ciphersuites.h | ||
| ssl_cookie.h | ||
| ssl_internal.h | ||
| ssl_ticket.h | ||
| threading.h | ||
| timing.h | ||
| version.h | ||
| x509.h | ||
| x509_crl.h | ||
| x509_crt.h | ||
| x509_csr.h | ||
| x509_internal.h | ||
| xtea.h | ||