coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-07-30 16:26:33 +08:00
Code Issues Packages Projects Releases Wiki Activity

Copy-editing

Browse Source 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
This commit is contained in:
Manuel Pégourié-Gonnard 2026-04-13 11:55:07 +02:00
parent d5cf74c7da
commit 00d767aef5
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
3rdparty/everest/library/x25519.c vendored
View File

@ -137,7 +137,7 @@ int mbedtls_x25519_calc_secret( mbedtls_x25519_context *ctx, size_t *olen,
Hacl_Curve25519_crypto_scalarmult( buf, secret, ctx->peer_point);
/* Wipe the copy and don't let the peer chose a small subgroup point */
/* Wipe the copy and don't let the peer choose a small subgroup point */
mbedtls_platform_zeroize( secret, MBEDTLS_X25519_KEY_SIZE_BYTES );
if( memcmp( buf, secret, MBEDTLS_X25519_KEY_SIZE_BYTES) == 0 )

2
ChangeLog.d/ecdh-legacy-buffer-overflow.txt
View File

@ -3,4 +3,4 @@ Security
provided output buffer is too small, sometimes (depending on the value of
the computed shared secret), the function would not return an error as it
should, but instead write past the end of the buffer. Reported by Eva
Crystal (0xiviel) from XSource Security. CVE-2026-35336
Crystal (0xiviel) from XSource Security. CVE-2026-35336.