Naveed 258bbbbdb0 Fix out-of-bounds write in mbedtls_ssl_cookie_write
mbedtls_ssl_cookie_write() only reserves COOKIE_HMAC_LEN bytes for the
MAC after the timestamp, but passed COOKIE_MD_OUTLEN as the output size
to psa_mac_sign_finish(). PSA fills the unused part of the declared
output buffer, so up to 4 bytes (20 with SHA-384) past the end of the
caller's buffer were overwritten when it had less than that to spare.

Pass the size that was actually reserved and add a regression test.

Signed-off-by: Naveed <naveed@bugqore.com>
2026-10-16 19:28:28 +05:30
..
.jenkins
configs Remove deprecated items 2025-08-01 11:45:14 +01:00
git-scripts Header updates 2023-11-03 12:21:36 +00:00
include/test Merge pull request #10394 from gilles-peskine-arm/threading-1.0-alt-build-mbedtls 2026-09-01 11:00:04 +02:00
opt-testcases Do not check fail cases for verify skipped 2026-03-13 18:04:16 +00:00
scripts Merge pull request #10642 from valeriosetti/replace-legacy-rsa-symbols-followup 2026-09-25 14:53:25 +00:00
src tests: ssl_helpers: run ssl_context reset check only when the SSL context is setup 2026-06-24 15:37:00 +02:00
suites Fix out-of-bounds write in mbedtls_ssl_cookie_write 2026-10-16 19:28:28 +05:30
.gitignore cmake: Generate test_keys.h and test_certs.h in the build tree 2025-03-26 21:19:28 +01:00
CMakeLists.txt cmake: Introduce TF_PSA_CRYPTO_PRIVATE_INCLUDE_DIRS 2026-03-09 08:28:51 +01:00
compat-in-docker.sh Header updates 2023-11-03 12:21:36 +00:00
compat.sh Merge pull request #10663 from yiwu0b11/remove_unused_ffdh_code 2026-05-13 16:49:20 +00:00
context-info.sh Fix test and formatting in ssl_context_info 2025-04-29 22:02:24 +02:00
Descriptions.txt
make-in-docker.sh Header updates 2023-11-03 12:21:36 +00:00
Makefile Make installable pqcp headers available to the libtestdriver1 build 2026-08-18 16:07:13 +02:00
ssl-opt.sh Merge pull request #10620 from mpg/ref-for-drivers 2026-08-13 09:56:09 +00:00