Gilles Peskine 01bf631159 Fix NULL+0 undefined behavior in ECB encryption and decryption ...

psa_cipher_encrypt() and psa_cipher_decrypt() sometimes add a zero offset to
a null pointer when the cipher does not use an IV. This is undefined
behavior, although it works as naively expected on most platforms. This
can cause a crash with modern Clang+ASan (depending on compiler optimizations).

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

2022-11-23 17:23:44 +01:00

..

00README.md

…

bn_mul-fix-x86-pic-compilation-for-gcc-4.txt

Add a ChangeLog entry

2022-07-19 09:02:47 +01:00

ecdsa-verify-fixes.txt

Credit Cryptofuzz in the changelog

2022-10-27 20:36:47 +01:00

fix_aead_psa_driver_build.txt

Add changelog entry

2022-10-13 08:06:47 +02:00

fix_build_tls1_2_with_single_encryption_type.txt

Reword change log entry

2022-10-10 14:03:16 +02:00

fix_cmake_using_iar_toolchain.txt

cmake: IAR support option( MBEDTLS_FATAL_WARNINGS)

2022-08-09 10:54:13 +01:00

fix_dh_genprime_error_reporting.txt

Fix issue in dh_genprime.c where the error code returned by mbedtls_mpi_write_file() is incorrectly reported on failure

2022-11-10 15:33:11 +00:00

fix_psa_crypto_cipher_h_include.txt

Use double quotes to include private header file psa_crypto_cipher.h

2022-08-02 13:36:18 +02:00

fix_x509_get_name_mem_leak.txt

Add ChangeLog entry for memory leak fix

2022-10-05 12:59:37 +01:00

fix_x509_info_hwmodulename.txt

Add Changelog entry

2022-09-30 09:32:27 -03:00

fix_zeroization.txt

Add Changelog

2022-11-01 16:28:20 +00:00

mpi-add-0-ub.txt

Fix NULL+0 in addition 0 + 0

2022-11-17 11:03:46 +01:00

mpi-most-negative-sint.txt

Fix undefined behavior with the most negative mbedtls_mpi_sint

2022-11-17 11:03:46 +01:00

muladdc_microblaze.txt

Add Changelog entry

2022-07-29 11:34:26 +01:00

negative-zero-from-add.txt

Changelog entry for the negative zero from add/sub

2022-11-10 15:15:25 +01:00

platform-setbuf.txt

Include platform.h unconditionally: fixes undefined mbedtls_setbuf

2022-10-07 15:52:58 +02:00

psa_rsa_needs_pk.txt

Fix PSA+RSA dependencies on PK

2022-10-25 20:32:02 +02:00

psa-ecb-ub.txt

Fix NULL+0 undefined behavior in ECB encryption and decryption

2022-11-23 17:23:44 +01:00

x509-broken-symlink-handling.txt

Add Changelog entry

2022-07-29 14:27:52 +01:00