mbedtls/ChangeLog.d
Demi Marie Obenour 889534a4d2 Fix segfault in mbedtls_oid_get_numeric_string
When passed an empty OID, mbedtls_oid_get_numeric_string would read one
byte from the zero-sized buffer and return an error code that depends on
its value.  This is demonstrated by the test suite changes, which
check that an OID with length zero and an invalid buffer pointer does
not cause Mbed TLS to segfault.

Also check that second and subsequent subidentifiers are terminated, and
add a test case for that.  Furthermore, stop relying on integer division
by 40, use the same loop for both the first and subsequent
subidentifiers, and add additional tests.

Signed-off-by: Demi Marie Obenour <demiobenour@gmail.com>
2023-03-16 01:06:41 -04:00
..
00README.md
add_interruptible_sign_hash
add-uri-san.txt
alignment-perf.txt
c-build-helper-hostcc.txt
changelog-6567-psa_key_derivation_abort-no-other_secret.txt Add changelog entry for a bug in non-PAKE code fixed during PAKE work 2023-03-14 21:41:54 +01:00
cmake-install.txt
coding-style.txt
conditionalize-mbedtls_mpi_sub_abs-memcpy.txt
crypto_config_ccm_star.txt
csr_v3_extensions.txt
driver-only-ecdsa.txt Add a ChangeLog entry for driver-only ECDSA 2023-03-10 12:37:16 +01:00
ec_jpake_driver_dispatch.txt Add change log entry (EC j-pake driver dispatch) 2023-03-12 16:59:28 +01:00
empty-retval-description.txt
fix_build_for_directory_names_containing_spaces.txt
fix-example-programs-no-args.txt
fix-gettimeofday-overflow.txt
fix-iar-warnings.txt
fix-jpake-user-peer.txt Reword change log entry 2023-03-13 16:21:40 +01:00
fix-oid-to-string-bugs.txt Fix segfault in mbedtls_oid_get_numeric_string 2023-03-16 01:06:41 -04:00
fix-rsaalt-test-guards.txt
improve_x509_cert_writing_serial_number_management.txt
make_sha224_sha384_independent_from_sha256_sha512.txt
mbedtls_ecp_point_read_binary-compressed-fmt.txt
mbedtls_ssl_read_undefined_behavior.txt
mpi-window-perf
pk_ext-pss_options-public.txt
pk-sign-restartable.txt
pkcs7-parser.txt Improve wording; use PKCS #7 not PKCS7 2023-03-12 08:50:58 +00:00
platform-zeroization.txt Changelog 2023-02-24 17:45:41 +00:00
psa_alg_tls12_ecjpake_to_pms-reject_ka.txt
psa-alt-headers.txt
san_rfc822Name.txt
tls13-only-renegotiation.txt Bug fixes from the split of ssl_handle_hs_message_post_handshake 2023-03-01 19:49:58 +01:00
vs2013.txt
workaround_gnutls_anti_replay_fail.txt
x509-subaltname-ext