Andres AG 2e65a54d5a Prevent signed integer overflow in CSR parsing ...

Modify the function mbedtls_x509_csr_parse_der() so that it checks the
parsed CSR version integer before it increments the value. This prevents
a potential signed integer overflow, as these have undefined behaviour
in the C standard.

2017-07-27 15:08:01 +01:00

..

.gitignore

…

aes.c

Export mbedtls_aes_(en/de)crypt to retain for API compatibility

2017-07-27 15:08:01 +01:00

aesni.c

…

arc4.c

…

asn1parse.c

…

asn1write.c

…

base64.c

…

bignum.c

Merge remote-tracking branch 'hanno/mpi_read_file_underflow' into development

2017-06-08 19:48:03 +02:00

blowfish.c

…

camellia.c

…

ccm.c

…

certs.c

Undo API change from SHA1 deprecation

2017-07-27 15:08:01 +01:00

cipher_wrap.c

…

cipher.c

…

cmac.c

…

CMakeLists.txt

Update the version number to 2.5.1

2017-06-20 23:08:10 +01:00

ctr_drbg.c

…

debug.c

…

des.c

…

dhm.c

Check return code of mbedtls_mpi_fill_random

2017-07-27 15:08:01 +01:00

ecdh.c

…

ecdsa.c

…

ecjpake.c

…

ecp_curves.c

…

ecp.c

Check return code of mbedtls_mpi_fill_random

2017-07-27 15:08:01 +01:00

entropy_poll.c

…

entropy.c

…

error.c

Only return VERIFY_FAILED from a single point

2017-07-06 11:58:41 +02:00

gcm.c

fix for issue 1118: check if iv is zero in gcm.

2017-07-27 15:08:01 +01:00

havege.c

…

hmac_drbg.c

…

Makefile

…

md2.c

…

md4.c

…

md5.c

…

md_wrap.c

…

md.c

…

memory_buffer_alloc.c

…

net_sockets.c

…

oid.c

…

padlock.c

…

pem.c

…

pk_wrap.c

…

pk.c

…

pkcs5.c

…

pkcs11.c

…

pkcs12.c

…

pkparse.c

…

pkwrite.c

…

platform.c

Rename macro SETUP_ALT to SETUP_TEARDOWN_ALT

2017-07-27 15:08:01 +01:00

ripemd160.c

…

rsa.c

Merge remote-tracking branch 'restricted/iotssl-1138-rsa-padding-check-restricted' into development-restricted

2017-06-08 20:31:06 +02:00

sha1.c

…

sha256.c

…

sha512.c

…

ssl_cache.c

…

ssl_ciphersuites.c

Undo API change

2017-07-27 15:08:01 +01:00

ssl_cli.c

Simplify retaining of messages for future processing

2017-06-08 10:12:16 +01:00

ssl_cookie.c

…

ssl_srv.c

Merge remote-tracking branch 'gilles/iotssl-1223/development' into development

2017-06-06 20:11:36 +02:00

ssl_ticket.c

…

ssl_tls.c

Ensure application data records are not kept when fully processed

2017-06-09 10:42:03 +01:00

threading.c

Remove mutexes from ECP hardware acceleration

2017-07-27 15:08:01 +01:00

timing.c

…

version_features.c

Checked names

2017-07-27 15:08:01 +01:00

version.c

…

x509_create.c

…

x509_crl.c

Fix potential integer overflow parsing DER CRL

2017-07-27 15:08:01 +01:00

x509_crt.c

Fix potential integer overflow parsing DER CRT

2017-07-27 15:08:01 +01:00

x509_csr.c

Prevent signed integer overflow in CSR parsing

2017-07-27 15:08:01 +01:00

x509.c

X.509 self-tests: replaced SHA-1 certificates by SHA-256

2017-06-06 18:44:13 +02:00

x509write_crt.c

…

x509write_csr.c

…

xtea.c

…