Manuel Pégourié-Gonnard 3e60d2a458 Fix potential double free in cert writing code ... In case an entry with the given OID already exists in the list passed to mbedtls_asn1_store_named_data() and there is not enough memory to allocate room for the new value, the existing entry will be freed but the preceding entry in the list will sill hold a pointer to it. (And the following entries in the list are no longer reachable.) This results in memory leak or a double free. The issue is we want to leave the list in a consistent state on allocation failure. (We could add a warning that the list is left in inconsistent state when the function returns NULL, but behaviour changes that require more care from the user are undesirable, especially in a stable branch.) The chosen solution is a bit inefficient in that there is a time where both blocks are allocated, but at least it's safe and this should trump efficiency here: this code is only used for generating certificates, which is unlikely to be done on very constrained devices, or to be in the critical loop of anything. Also, the sizes involved should be fairly small anyway. fixes #367		2015-12-10 11:24:35 +01:00
..
.gitignore
aes.c
aesni.c
arc4.c
asn1parse.c
asn1write.c	Fix potential double free in cert writing code	2015-12-10 11:24:35 +01:00
base64.c	Fix references to non-standard SIZE_T_MAX	2015-10-05 15:23:11 +01:00
bignum.c	Fix two more compiler warnings	2015-12-03 19:09:23 +01:00
blowfish.c
camellia.c
ccm.c
certs.c
cipher.c
cipher_wrap.c
CMakeLists.txt	Changed version number to 2.1.3	2015-11-04 22:08:33 +00:00
ctr_drbg.c
debug.c	Fix macroization of inline in C++	2015-10-05 11:41:36 +01:00
des.c
dhm.c
ecdh.c
ecdsa.c
ecp.c	Optimize more common cases in ecp_muladd()	2015-10-27 10:30:36 +01:00
ecp_curves.c	Fix macroization of inline in C++	2015-10-05 11:41:36 +01:00
entropy.c
entropy_poll.c
error.c
gcm.c
havege.c
hmac_drbg.c
Makefile
md.c
md2.c
md4.c
md5.c
md_wrap.c
memory_buffer_alloc.c
net.c	Fix compile error in net.c with musl libc	2015-10-05 12:17:49 +01:00
oid.c	Fix typo in an OID name	2015-11-02 05:58:10 +09:00
padlock.c
pem.c	Merge of IOTSSL-476 - Random malloc in pem_read()	2015-10-05 00:26:36 +01:00
pk.c
pk_wrap.c
pkcs5.c
pkcs11.c
pkcs12.c	Fix stack buffer overflow in pkcs12	2015-09-28 19:47:50 +02:00
pkparse.c
pkwrite.c	Fix other occurrences of same bounds check issue	2015-11-02 10:43:03 +09:00
platform.c
ripemd160.c
rsa.c	Try to prevent some misuse of RSA functions	2015-10-30 10:57:43 +01:00
sha1.c
sha256.c
sha512.c
ssl_cache.c
ssl_ciphersuites.c
ssl_cli.c	Fix warning in some reduced configs	2015-10-28 13:16:56 +01:00
ssl_cookie.c
ssl_srv.c	Fix potential overflow in CertificateRequest	2015-10-02 11:20:28 +02:00
ssl_ticket.c
ssl_tls.c	Fix other int casts in bounds checking	2015-11-02 10:43:03 +09:00
threading.c
timing.c
version.c
version_features.c	Update generated file	2015-09-09 11:50:00 +02:00
x509.c
x509_create.c	Fix other occurrences of same bounds check issue	2015-11-02 10:43:03 +09:00
x509_crl.c
x509_crt.c	Fix potential heap corruption on Windows	2015-11-02 10:41:13 +09:00
x509_csr.c
x509write_crt.c
x509write_csr.c
xtea.c