Hanno Becker 21df7f90d2 Fix handling of HS msgs in mbedtls_ssl_read if renegotiation unused ...

Previously, if `MBEDTLS_SSL_RENEGOTIATION` was disabled, incoming handshake
messages in `mbedtls_ssl_read` (expecting application data) lead to the
connection being closed. This commit fixes this, restricting the
`MBEDTLS_SSL_RENEGOTIATION`-guard to the code-paths responsible for accepting
renegotiation requests and aborting renegotiation attempts after too many
unexpected records have been received.

2017-10-17 11:03:26 +01:00

..

.gitignore

…

aes.c

Export mbedtls_aes_(en/de)crypt to retain for API compatibility

2017-07-27 21:44:33 +01:00

aesni.c

…

arc4.c

…

asn1parse.c

Fix 1 byte overread in mbedtls_asn1_get_int()

2016-10-13 13:54:14 +01:00

asn1write.c

…

base64.c

Add comment to integer overflow fix in base64.c

2017-02-15 23:31:07 +02:00

bignum.c

Merge remote-tracking branch 'hanno/mpi_read_file_underflow' into development

2017-06-08 19:48:03 +02:00

blowfish.c

…

camellia.c

…

ccm.c

…

certs.c

Undo API change from SHA1 deprecation

2017-07-27 21:44:33 +01:00

cipher_wrap.c

…

cipher.c

Fix integer overflows in buffer bound checks

2017-02-15 23:31:07 +02:00

cmac.c

Rename time and index parameter to avoid name conflict.

2017-07-28 22:28:08 +01:00

CMakeLists.txt

Update version number to 2.6.0

2017-08-10 11:51:16 +01:00

ctr_drbg.c

Fix integer overflows in buffer bound checks

2017-02-15 23:31:07 +02:00

debug.c

Fix compiler warning in debug.c

2017-02-15 09:08:26 +00:00

des.c

…

dhm.c

Check return code of mbedtls_mpi_fill_random

2017-07-27 21:44:33 +01:00

ecdh.c

…

ecdsa.c

…

ecjpake.c

…

ecp_curves.c

ECP: Add module and function level replacement options.

2017-05-11 22:42:14 +01:00

ecp.c

Check return code of mbedtls_mpi_fill_random

2017-07-27 21:44:33 +01:00

entropy_poll.c

…

entropy.c

Rename time and index parameter to avoid name conflict.

2017-07-28 22:28:08 +01:00

error.c

Only return VERIFY_FAILED from a single point

2017-07-06 11:58:41 +02:00

gcm.c

fix for issue 1118: check if iv is zero in gcm.

2017-07-27 21:44:33 +01:00

havege.c

…

hmac_drbg.c

…

Makefile

Added cmac.o to libary/Makefile

2016-10-13 13:51:09 +01:00

md2.c

Fix integer overflows in buffer bound checks

2017-02-15 23:31:07 +02:00

md4.c

…

md5.c

…

md_wrap.c

…

md.c

…

memory_buffer_alloc.c

…

net_sockets.c

Fix typo and bracketing in macro args

2017-10-07 18:29:03 +01:00

oid.c

…

padlock.c

…

pem.c

Fix unused variable/function compilation warnings

2017-02-15 22:54:42 +02:00

pk_wrap.c

Fix data loss in unsigned int cast in PK

2017-05-11 21:55:17 +01:00

pk.c

Fix data loss in unsigned int cast in PK

2017-05-11 21:55:17 +01:00

pkcs5.c

…

pkcs11.c

…

pkcs12.c

…

pkparse.c

Clarify Comments and Fix Typos (#651)

2017-02-15 09:08:26 +00:00

pkwrite.c

…

platform.c

Rename macro SETUP_ALT to SETUP_TEARDOWN_ALT

2017-07-27 21:44:33 +01:00

ripemd160.c

…

rsa.c

Merge remote-tracking branch 'restricted/iotssl-1138-rsa-padding-check-restricted' into development-restricted

2017-06-08 20:31:06 +02:00

sha1.c

…

sha256.c

Use allocated memory for SHA self tests

2016-10-13 15:10:14 +01:00

sha512.c

Use allocated memory for SHA self tests

2016-10-13 15:10:14 +01:00

ssl_cache.c

Fix naked call to time() with platform call

2017-07-28 23:46:43 +01:00

ssl_ciphersuites.c

Undo API change

2017-07-27 21:44:33 +01:00

ssl_cli.c

Always print gmt_unix_time in TLS client

2017-10-06 11:55:32 +01:00

ssl_cookie.c

Fix resource leak when using mutex and ssl_cookie

2017-03-02 12:26:11 +00:00

ssl_srv.c

Parse Signature Algorithm ext when renegotiating

2017-10-11 12:49:00 +01:00

ssl_ticket.c

…

ssl_tls.c

Fix handling of HS msgs in mbedtls_ssl_read if renegotiation unused

2017-10-17 11:03:26 +01:00

threading.c

Remove mutexes from ECP hardware acceleration

2017-07-27 21:44:32 +01:00

timing.c

…

version_features.c

Checked names

2017-07-27 21:44:33 +01:00

version.c

…

x509_create.c

…

x509_crl.c

Fix potential integer overflow parsing DER CRL

2017-07-27 21:44:34 +01:00

x509_crt.c

Fix potential integer overflow parsing DER CRT

2017-07-27 21:44:34 +01:00

x509_csr.c

Prevent signed integer overflow in CSR parsing

2017-07-27 21:44:34 +01:00

x509.c

Rename time and index parameter to avoid name conflict.

2017-07-28 22:28:08 +01:00

x509write_crt.c

Rename time and index parameter to avoid name conflict.

2017-07-28 22:28:08 +01:00

x509write_csr.c

…

xtea.c

…