From 7da5088289348abd7a3d21a12c31eaf2537d9831 Mon Sep 17 00:00:00 2001 From: Krzysztof Stachowiak Date: Wed, 4 Apr 2018 13:47:40 +0200 Subject: [PATCH] Update change log --- ChangeLog | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/ChangeLog b/ChangeLog index ee9b669e00..f2488a250c 100644 --- a/ChangeLog +++ b/ChangeLog @@ -9,6 +9,12 @@ Security a non DER-compliant certificate correctly signed by a trusted CA, or a trusted CA with a non DER-compliant certificate. Found by luocm on GitHub. Fixes #825. + * Fix buffer length assertion in the ssl_parse_certificate_request() + function which leads to an arbitrary overread of the message buffer. The + overreads could occur upon receiving a message malformed at the point + where an optional signature algorithms list is expected in the cases of + the signature algorithms section being too short. In the debug builds + the overread data is printed to the standard output. Bugfix * Fix spurious uninitialized variable warning in cmac.c. Fix independently @@ -28,6 +34,9 @@ Bugfix ECPrivateKey structure. Found by jethrogb, fixed in #1379. * Return plaintext data sooner on unpadded CBC decryption, as stated in the mbedtls_cipher_update() documentation. Contributed by Andy Leiserson. + * Fix buffer length assertions in the ssl_parse_certificate_request() + function which leads to a potential one byte overread of the message + buffer. Changes * Support cmake build where Mbed TLS is a subproject. Fix