mbedtls/ChangeLog.d
Demi Marie Obenour 6b8e8ff079 Fix segfault in mbedtls_oid_get_numeric_string
When passed an empty OID, mbedtls_oid_get_numeric_string would read one
byte from the zero-sized buffer and return an error code that depends on
its value.  This is demonstrated by the test suite changes, which
check that an OID with length zero and an invalid buffer pointer does
not cause Mbed TLS to segfault.

Also check that second and subsequent subidentifiers are terminated, and
add a test case for that.  Furthermore, stop relying on integer division
by 40, use the same loop for both the first and subsequent
subidentifiers, and add additional tests.

Signed-off-by: Demi Marie Obenour <demiobenour@gmail.com>
2023-03-16 01:07:35 -04:00
..
00README.md 2.24.0 is still covered by the old policy 2020-10-01 00:35:49 +02:00
build-without-certs.txt Fix misplaced #endif in test program 2023-02-01 18:19:23 +01:00
c-build-helper-hostcc.txt Fix near-tautological repetition in ChangeLog 2023-02-01 13:41:34 +00:00
clang-15-bignum-warning.txt Silence a warning from Clang >=15 about an unused local variable 2023-02-24 12:08:57 +01:00
coding-style.txt Announce coding style change in the changelog 2023-02-08 19:45:41 +01:00
conditionalize-mbedtls_mpi_sub_abs-memcpy.txt mbedtls_mpi_sub_abs: Skip memcpy when redundant (#6701). 2023-01-31 15:45:44 -05:00
empty-retval-description.txt Changelog entry for pacifying clang -Wdocumentation about \retval 2023-02-24 11:41:55 +01:00
fix_build_for_directory_names_containing_spaces.txt Add ChangeLog entry 2023-01-10 09:37:43 +00:00
fix_hard_link_across_drives Copy files instead of hard-linking on Windows 2022-12-07 19:34:52 +01:00
fix_timing_alt.txt Be consistent with self-test naming 2023-01-26 04:38:37 -05:00
fix-example-programs-no-args.txt Amend changelog entry 2023-02-02 12:07:07 +00:00
fix-gettimeofday-overflow.txt Add Changelog entry 2022-12-20 13:21:19 +00:00
fix-iar-warnings.txt Fix IAR warnings 2023-02-13 15:07:44 +00:00
fix-oid-to-string-bugs.txt Fix segfault in mbedtls_oid_get_numeric_string 2023-03-16 01:07:35 -04:00
fix-rsaalt-test-guards.txt Add Changelog 2023-01-20 11:43:01 +00:00
improve_x509_cert_writing_serial_number_management.txt changelog: document the enforced check on x509 serial setting 2023-01-13 08:41:15 +01:00
mbedtls_ssl_read_undefined_behavior.txt Improve changelog 2023-02-24 16:02:26 +00:00
mpi-window-perf Reduce the default MBEDTLS_ECP_WINDOW_SIZE value to 2 2023-02-24 08:05:18 -05:00
x509-subaltname-ext Add a ChangeLog entry 2023-02-08 09:19:09 -05:00