yuzu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2025-01-10 20:45:45 +00:00
Code Issues Packages Projects Releases Wiki Activity
mbedtls/library
History
Manuel Pégourié-Gonnard 59efb6a1b9 Fix potential buffer overflow in mpi_read_string() 
Found by Guido Vranken.

Two possible integer overflows (during << 2 or addition in BITS_TO_LIMB())
could result in far too few memory to be allocated, then overflowing the
buffer in the subsequent for loop.

Both integer overflows happen when slen is close to or greater than
SIZE_T_MAX >> 2 (ie 2^30 on a 32 bit system).

Note: one could also avoid those overflows by changing BITS_TO_LIMB(s << 2) to
CHARS_TO_LIMB(s >> 1) but the solution implemented looks more robust with
respect to future code changes.
2015-09-30 16:50:31 +02:00
..
.gitignore Minor gitginore fixes 2015-01-28 15:34:01 +00:00
aes.c Rename website and repository 2015-03-06 13:17:10 +00:00
aesni.c Rename website and repository 2015-03-06 13:17:10 +00:00
arc4.c Rename website and repository 2015-03-06 13:17:10 +00:00
asn1parse.c Rename website and repository 2015-03-06 13:17:10 +00:00
asn1write.c Rename website and repository 2015-03-06 13:17:10 +00:00
base64.c Rename website and repository 2015-03-06 13:17:10 +00:00
bignum.c Fix potential buffer overflow in mpi_read_string() 2015-09-30 16:50:31 +02:00
blowfish.c Rename website and repository 2015-03-06 13:17:10 +00:00
camellia.c Rename website and repository 2015-03-06 13:17:10 +00:00
ccm.c Fix memleak with repeated [gc]cm_setkey() 2015-05-27 17:40:16 +02:00
certs.c Rename website and repository 2015-03-06 13:17:10 +00:00
cipher.c Add POLARSSL_DEPRECATED_{WARNING,REMOVED} 2015-03-23 14:11:11 +01:00
cipher_wrap.c Rename website and repository 2015-03-06 13:17:10 +00:00
CMakeLists.txt Bump version to 1.3.13 2015-09-17 11:53:14 +02:00
ctr_drbg.c Add missing 'const' on selftest data 2015-03-11 09:13:42 +00:00
debug.c Revert "Avoid formatting debug message uselessly" 2015-08-10 17:36:47 +02:00
des.c Rename website and repository 2015-03-06 13:17:10 +00:00
dhm.c accept PKCS#3 DH parameters with privateValueLength included 2015-04-15 13:27:13 +02:00
ecdh.c Rename website and repository 2015-03-06 13:17:10 +00:00
ecdsa.c Rename website and repository 2015-03-06 13:17:10 +00:00
ecp.c Merge remote-tracking branch 'peterdettman/perf-ecp-double-jac' into mbedtls-1.3 2015-05-11 20:26:47 +02:00
ecp_curves.c Rename website and repository 2015-03-06 13:17:10 +00:00
entropy.c Serious bug fix in entropy.c 2015-06-01 12:28:29 +02:00
entropy_poll.c Fix -Wshadow warnings 2015-08-31 11:07:51 +02:00
error.c Typos and doc additions 2015-05-11 10:44:11 +01:00
gcm.c Fix memleak with repeated [gc]cm_setkey() 2015-05-27 17:40:16 +02:00
havege.c Rename website and repository 2015-03-06 13:17:10 +00:00
hmac_drbg.c Fix use of deprecated function in the library 2015-03-20 18:23:52 +00:00
Makefile Fix missing -static-libgcc when building dlls 2015-08-10 11:56:54 +02:00
md.c Add POLARSSL_DEPRECATED_{WARNING,REMOVED} 2015-03-23 14:11:11 +01:00
md2.c Fix warning with MD/SHA ALT implementation 2015-08-31 11:22:47 +02:00
md4.c Fix warning with MD/SHA ALT implementation 2015-08-31 11:22:47 +02:00
md5.c Fix warning with MD/SHA ALT implementation 2015-08-31 11:22:47 +02:00
md_wrap.c Rename website and repository 2015-03-06 13:17:10 +00:00
memory_buffer_alloc.c Rename website and repository 2015-03-06 13:17:10 +00:00
net.c Rename website and repository 2015-03-06 13:17:10 +00:00
oid.c Add support for X.520 uniqueIdentifier 2015-03-27 13:03:54 +01:00
padlock.c Fix bug in Via Padlock support 2015-04-02 10:53:59 +01:00
pbkdf2.c Add POLARSSL_DEPRECATED_{WARNING,REMOVED} 2015-03-23 14:11:11 +01:00
pem.c Accept a trailing space at end of PEM lines 2015-08-10 12:01:50 +02:00
pk.c Rename website and repository 2015-03-06 13:17:10 +00:00
pk_wrap.c Rename website and repository 2015-03-06 13:17:10 +00:00
pkcs5.c Add missing 'const' on selftest data 2015-03-11 09:13:42 +00:00
pkcs11.c Rename website and repository 2015-03-06 13:17:10 +00:00
pkcs12.c Fix stack buffer overflow in pkcs12 2015-09-30 16:46:07 +02:00
pkparse.c Fix bug in pk_parse_key() 2015-04-15 11:21:24 +02:00
pkwrite.c Rename website and repository 2015-03-06 13:17:10 +00:00
platform.c Fix compile errors with NO_STD_FUNCTIONS 2015-06-03 10:20:33 +01:00
ripemd160.c Rename website and repository 2015-03-06 13:17:10 +00:00
rsa.c Add counter-measure against RSA-CRT attack 2015-09-09 12:23:47 +02:00
sha1.c Fix warning with MD/SHA ALT implementation 2015-08-31 11:22:47 +02:00
sha256.c Fix warning with MD/SHA ALT implementation 2015-08-31 11:22:47 +02:00
sha512.c Fix warning with MD/SHA ALT implementation 2015-08-31 11:22:47 +02:00
ssl_cache.c Rename website and repository 2015-03-06 13:17:10 +00:00
ssl_ciphersuites.c Rename website and repository 2015-03-06 13:17:10 +00:00
ssl_cli.c Fix possible client crash on API misuse 2015-09-03 10:44:32 +02:00
ssl_srv.c Fix bug in server parsing point formats extension 2015-09-17 11:46:56 +02:00
ssl_tls.c Fix handling of long PSK identities 2015-08-31 11:43:47 +02:00
threading.c Rename website and repository 2015-03-06 13:17:10 +00:00
timing.c Increase tolerance of timing selftest 2015-08-19 14:48:34 +02:00
version.c Rename website and repository 2015-03-06 13:17:10 +00:00
version_features.c Update generated file 2015-04-09 16:35:54 +02:00
x509.c Typos and doc additions 2015-05-11 10:44:11 +01:00
x509_create.c Rename website and repository 2015-03-06 13:17:10 +00:00
x509_crl.c Fix undefined behaviour in x509 2015-04-30 11:21:18 +02:00
x509_crt.c Skip to trusted certs early in the chain 2015-09-01 18:34:15 +02:00
x509_csr.c Rename website and repository 2015-03-06 13:17:10 +00:00
x509write_crt.c Rename website and repository 2015-03-06 13:17:10 +00:00
x509write_csr.c Rename website and repository 2015-03-06 13:17:10 +00:00
xtea.c Rename website and repository 2015-03-06 13:17:10 +00:00