Manuel Pégourié-Gonnard b67a5c1f29 Fix SSLv3 MAC computation ... In a previous PR (Fix heap corruption in implementation of truncated HMAC extension #425) the place where MAC is computed was changed from the end of the SSL I/O buffer to a local buffer (then (part of) the content of the local buffer is either copied to the output buffer of compare to the input buffer). Unfortunately, this change was made only for TLS 1.0 and later, leaving SSL 3.0 in an inconsistent state due to ssl_mac() still writing to the old, hard-coded location, which, for MAC verification, resulted in later comparing the end of the input buffer (containing the computed MAC) to the local buffer (uninitialised), most likely resulting in MAC verification failure, hence no interop (even with ourselves). This commit completes the move to using a local buffer by using this strategy for SSL 3.0 too. Fortunately ssl_mac() was static so it's not a problem to change its signature.		2017-12-19 10:05:00 +01:00
..
.gitignore	Split libs with make + general make cleanups	2015-06-25 10:59:56 +02:00
aes.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
aesni.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
arc4.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
asn1parse.c	Fix 1 byte overread in mbedtls_asn1_get_int()	2016-10-12 17:45:29 +01:00
asn1write.c	Fix potential double free in cert writing code	2015-12-10 11:24:35 +01:00
base64.c	Add comment to integer overflow fix in base64.c	2017-02-20 21:51:18 +00:00
bignum.c	Zeroize stack before returning from mpi_fill_random	2017-10-25 15:46:29 +01:00
blowfish.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
camellia.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ccm.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
certs.c	X.509 self-tests: replaced SHA-1 certificates by SHA-256	2017-06-06 19:08:23 +02:00
cipher.c	Fix integer overflows in buffer bound checks	2017-02-20 21:49:01 +00:00
cipher_wrap.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
CMakeLists.txt	Update version number to 2.1.9	2017-08-10 11:51:47 +01:00
ctr_drbg.c	Zeroize tmp buf in ctr_drbg_write_seed_file()	2017-07-11 17:31:02 +01:00
debug.c	Fix macroization of inline in C++	2015-10-05 11:41:36 +01:00
des.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
dhm.c	Merge remote-tracking branch 'upstream-restricted/pr/406' into mbedtls-2.1-restricted	2017-11-28 16:19:19 +01:00
ecdh.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ecdsa.c	Add checks for private parameter in mbedtls_ecdsa_sign()	2017-11-20 17:11:17 +00:00
ecp.c	Fix information leak in ecp_gen_keypair_base	2017-10-25 15:44:10 +01:00
ecp_curves.c	ECP: Prevent freeing a buffer on stack	2017-02-28 18:56:35 +00:00
entropy.c	Merge branch 'mbedtls-2.1' into mbedtls-2.1-restricted	2017-11-28 18:44:49 +01:00
entropy_poll.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
error.c	Only return VERIFY_FAILED from a single point	2017-07-28 12:20:48 +01:00
gcm.c	Backport 2.1: check if iv is zero in gcm.	2017-07-20 00:30:44 +02:00
havege.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
hmac_drbg.c	Zeroize tmp bufs in hmac_drbg.c functions	2017-07-11 17:22:03 +01:00
Makefile	Make ar invocation more portable	2016-01-08 14:52:14 +01:00
md.c	Zeroize tmp buf in mbedtls_md_file() md.c	2017-07-11 17:19:30 +01:00
md2.c	Fix integer overflows in buffer bound checks	2017-02-20 21:49:01 +00:00
md4.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
md5.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
md_wrap.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
memory_buffer_alloc.c	Fixes memory leak in memory_buffer_alloc.c debug	2016-05-05 17:51:09 +01:00
net.c	Backup errno in net_would_block	2017-05-12 15:04:07 +01:00
oid.c	Fix typo in an OID name	2015-11-02 05:58:10 +09:00
padlock.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
pem.c	Merge branch 'mbedtls-2.1' into mbedtls-2.1-restricted	2017-11-28 18:44:49 +01:00
pk.c	Change PK module preprocessor check on word size	2017-08-04 13:43:07 +01:00
pk_wrap.c	Change PK module preprocessor check on word size	2017-08-04 13:43:07 +01:00
pkcs5.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
pkcs11.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
pkcs12.c	Fix stack buffer overflow in pkcs12	2015-09-28 19:47:50 +02:00
pkparse.c	Merge branch 'mbedtls-2.1' into mbedtls-2.1-restricted	2017-12-18 11:44:26 +01:00
pkwrite.c	Fix other occurrences of same bounds check issue	2015-11-02 10:43:03 +09:00
platform.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ripemd160.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
rsa.c	RSA PSS: remove redundant check; changelog	2017-10-23 14:49:43 +02:00
sha1.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
sha256.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
sha512.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ssl_cache.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ssl_ciphersuites.c	Undo API change	2017-06-20 19:33:51 +01:00
ssl_cli.c	Enhance documentation of ssl_write_hostname_ext, adapt ChangeLog.	2017-09-30 23:49:01 +01:00
ssl_cookie.c	Backport 2.1:Resource leak in ssl_cookie and mutex	2017-03-02 21:11:16 +00:00
ssl_srv.c	Merge branch 'iotssl-1368-unsafe-bounds-check-psk-identity-merge-2.1' into mbedtls-2.1-restricted	2017-11-23 19:06:29 +01:00
ssl_ticket.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ssl_tls.c	Fix SSLv3 MAC computation	2017-12-19 10:05:00 +01:00
threading.c	Fix bug in threading sample implementation #667	2017-05-15 13:22:51 +01:00
timing.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
version.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
version_features.c	Remove MBEDTLS_SSL_AEAD_RANDOM_IV feature	2016-10-13 10:35:34 +01:00
x509.c	Correctly handle leap year in x509_date_is_valid()	2017-10-12 21:03:01 +01:00
x509_create.c	Fix other occurrences of same bounds check issue	2015-11-02 10:43:03 +09:00
x509_crl.c	Fix build error with gcc -Werror=misleading-indentation	2017-12-01 11:45:21 +01:00
x509_crt.c	Improve comments	2017-07-28 12:20:48 +01:00
x509_csr.c	Prevent signed integer overflow in CSR parsing	2017-07-26 17:59:20 +01:00
x509write_crt.c	Use X509 CRT version macros for version checks in x509write_crt_der	2017-10-04 14:52:21 +01:00
x509write_csr.c	Minor style and typo corrections	2017-10-04 14:51:32 +01:00
xtea.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00