mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-10-29 02:17:27 +08:00
The previous approach documented the in_cid_len > sizeof(in_cid) cap as untestable, since the overflowing memcpy() lands inside the transform structure where sanitizers cannot see it. It can be guarded without a sanitizer: grow the in_cid field in the loaded data (keep its bytes, pad to MBEDTLS_SSL_CID_IN_LEN_MAX + 1) and append the rest of the serialized data untouched, so the in-buffer bounds check passes and the cap is what must reject the length. Without the cap the remaining data parses correctly aligned and the load succeeds, so the test catches a regression by the return value alone. Signed-off-by: Naveed <naveed@bugqore.com> |
||
|---|---|---|
| .. | ||
| .jenkins | ||
| configs | ||
| git-scripts | ||
| include/test | ||
| opt-testcases | ||
| scripts | ||
| src | ||
| suites | ||
| .gitignore | ||
| CMakeLists.txt | ||
| compat-in-docker.sh | ||
| compat.sh | ||
| context-info.sh | ||
| Descriptions.txt | ||
| make-in-docker.sh | ||
| Makefile | ||
| ssl-opt.sh | ||