mbedtls/ChangeLog.d/net_poll-fd_setsize.txt at 2352396808b05fef590bbf5289eb0fbc3812df08 - yuzu/mbedtls - Forgejo

yuzu/mbedtls

mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-12-27 05:25:47 +00:00

Gilles Peskine ddf4374879 Fix stack buffer overflow in net functions with large file descriptor

Fix a stack buffer overflow with mbedtls_net_poll() and
mbedtls_net_recv_timeout() when given a file descriptor that is beyond
FD_SETSIZE. The bug was due to not checking that the file descriptor
is within the range of an fd_set object.

Fix #4169

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

2021-02-25 15:56:48 +01:00

5 lines

192 B

Plaintext

Raw Blame History

 Security
    * Fix a stack buffer overflow with mbedtls_net_poll() and
      mbedtls_net_recv_timeout() when given a file descriptor that is
      beyond FD_SETSIZE. Reported by FigBug in #4169.