mirror/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-04-17 11:43:37 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Add ChangeLog entry for buffer overflow fix

Browse Source 
Signed-off-by: David Horstmann <david.horstmann@arm.com>
This commit is contained in:
David Horstmann 2024-10-11 17:17:21 +01:00
parent 3188178095
commit 019074fad6
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
ChangeLog.d/fix-pkwrite-buffer-overrun.txt Normal file
View File

@ -0,0 +1,9 @@
Security
* Fix a buffer overflow in mbedtls_pk_write_pubkey(),
mbedtls_pk_write_pubkey_der() and mbedtls_pk_write_key_der().
With MBEDTLS_USE_PSA_CRYPTO turned on, these functions would
write to a location before the start of the output buffer if it was less
than the size of the key being written and also less than
PK_MAX_EC_PUBLIC_KEY_SIZE (for EC public keys) and
PSA_EXPORT_KEY_PAIR_MAX_SIZE (for RSA private keys).
This buffer overflow only occurs for keys with the type MBEDTLS_PK_OPAQUE.