Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2015-10-05 | Bump version to 1.2.17polarssl-1.2.17 | Manuel Pégourié-Gonnard | 6 | -10/+10 | |
2015-10-05 | Merge branch 'polarssl-1.2-restricted' of ↵ | Simon Butcher | 7 | -26/+20 | |
ssh://github.com/ARMmbed/mbedtls-restricted into polarssl-1.2-restricted | |||||
2015-10-05 | Added CVE code to ChangeLog | Simon Butcher | 1 | -3/+3 | |
2015-10-05 | Merge branch 'polarssl-1.2' into polarssl-1.2-restricted | Manuel Pégourié-Gonnard | 7 | -26/+20 | |
* polarssl-1.2: Fix spurious #endif from previous cherry-pick Fix macroization of inline in C++ Add missing warning in doc Fix compile error in net.c with musl libc | |||||
2015-10-05 | Changed attribution for Guido Vranken | Simon Butcher | 1 | -14/+14 | |
2015-10-05 | Merge of multiple security fixes | Simon Butcher | 7 | -10/+58 | |
2015-10-05 | Fix references to non-standard SIZE_T_MAX | Manuel Pégourié-Gonnard | 3 | -5/+7 | |
Turns out C99 doesn't define SIZE_T_MAX, so let's not use it. | |||||
2015-10-05 | Fix spurious #endif from previous cherry-pick | Manuel Pégourié-Gonnard | 2 | -4/+2 | |
2015-10-05 | Fix macroization of inline in C++ | Manuel Pégourié-Gonnard | 5 | -20/+11 | |
When compiling as C++, MSVC complains about our macroization of a keyword. Stop doing that as we know inline is always available in C++ | |||||
2015-10-05 | Add missing warning in doc | Manuel Pégourié-Gonnard | 1 | -1/+2 | |
Found by Nicholas Wilson fixes #288 | |||||
2015-10-05 | Fix compile error in net.c with musl libc | Manuel Pégourié-Gonnard | 2 | -1/+7 | |
fixes #278 | |||||
2015-10-02 | Fix potential overflow in CertificateRequest | Manuel Pégourié-Gonnard | 2 | -2/+11 | |
2015-10-02 | Add ChangeLog entry | Manuel Pégourié-Gonnard | 1 | -0/+11 | |
2015-10-01 | Fix typos in ChangeLog | Manuel Pégourié-Gonnard | 1 | -1/+1 | |
2015-10-01 | Fix potential overflow in base64_encode | Manuel Pégourié-Gonnard | 3 | -5/+12 | |
2015-10-01 | Fix potential random malloc in pem_read() | Manuel Pégourié-Gonnard | 3 | -0/+10 | |
2015-10-01 | Fix potential buffer overflow in mpi_read_string() | Manuel Pégourié-Gonnard | 2 | -2/+12 | |
Found by Guido Vranken. Two possible integer overflows (during << 2 or addition in BITS_TO_LIMB()) could result in far too few memory to be allocated, then overflowing the buffer in the subsequent for loop. Both integer overflows happen when slen is close to or greater than SIZE_T_MAX >> 2 (ie 2^30 on a 32 bit system). Note: one could also avoid those overflows by changing BITS_TO_LIMB(s << 2) to CHARS_TO_LIMB(s >> 1) but the solution implemented looks more robust with respect to future code changes. | |||||
2015-10-01 | Fix stack buffer overflow in pkcs12 | Manuel Pégourié-Gonnard | 2 | -1/+15 | |
2015-09-30 | Added max length checking of hostname | Simon Butcher | 2 | -0/+5 | |
2015-09-22 | Refined credits in ChangeLog for fuzzing issue | Simon Butcher | 1 | -1/+2 | |
Changed GDS to Gotham Digital Science | |||||
2015-09-21 | Remove file that should never have been added | Manuel Pégourié-Gonnard | 1 | -2876/+0 | |
Oops. | |||||
2015-09-17 | Bump version to 1.2.15polarssl-1.2.16 | Manuel Pégourié-Gonnard | 6 | -10/+10 | |
2015-09-17 | Fix GNUism in bump_version.sh | Manuel Pégourié-Gonnard | 1 | -11/+11 | |
2015-09-17 | Merge pull request #296 from ARMmbed/polarssl-1.2-restricted | Simon Butcher | 4 | -3/+2934 | |
Merge of polarssl-1.2-restricted | |||||
2015-09-09 | Add counter-measure against RSA-CRT attack | Manuel Pégourié-Gonnard | 2 | -3/+41 | |
https://securityblog.redhat.com/2015/09/02/factoring-rsa-keys-with-tls-perfect-forward-secrecy/ backport of a1cdcd2 | |||||
2015-09-03 | Fix possible client crash on API misuse | Manuel Pégourié-Gonnard | 3 | -0/+2893 | |
2015-08-31 | Fix warning with MD/SHA ALT implementation | Manuel Pégourié-Gonnard | 7 | -12/+18 | |
backport of e217cee see #239 | |||||
2015-08-11 | Disable -Wunused-result in programs and tests | Manuel Pégourié-Gonnard | 2 | -1/+5 | |
2015-08-10 | Fix compiler warning in test | Manuel Pégourié-Gonnard | 1 | -2/+3 | |
2015-08-10 | Silence compiler warning in test | Manuel Pégourié-Gonnard | 1 | -1/+1 | |
Happens with some, but not all, versions of GCC/Glibc. | |||||
2015-08-10 | Accept a trailing space at end of PEM lines | Manuel Pégourié-Gonnard | 2 | -0/+3 | |
With certs being copy-pasted from webmails and all, this will probably become more and more common. | |||||
2015-08-10 | Fix compile error with armcc5 --gnu | Manuel Pégourié-Gonnard | 2 | -1/+4 | |
2015-08-10 | Fix missing -static-libgcc for dlls | Manuel Pégourié-Gonnard | 2 | -1/+3 | |
2015-08-10 | Fix bug with cmake and old version of GCC | Manuel Pégourié-Gonnard | 2 | -2/+11 | |
2015-08-10 | Make tests/compat.sh executable | Manuel Pégourié-Gonnard | 1 | -0/+0 | |
2015-08-10 | Prepare for 1.2.15 releasepolarssl-1.2.15 | Paul Bakker | 6 | -10/+10 | |
2015-07-03 | Up default server DH params to 2048 bits | Manuel Pégourié-Gonnard | 3 | -4/+6 | |
2015-07-03 | Update dh_genprime program | Manuel Pégourié-Gonnard | 1 | -12/+36 | |
- no warning - configurable size - default to 2048 bits | |||||
2015-06-29 | Fix unchecked malloc() | Manuel Pégourié-Gonnard | 1 | -0/+5 | |
Found using Infer. | |||||
2015-06-29 | Fix thread-safety issue in debug.c | Manuel Pégourié-Gonnard | 3 | -5/+24 | |
2015-06-29 | Up min size of DHM params to 1024 bits | Manuel Pégourié-Gonnard | 5 | -2/+15 | |
2015-06-26 | Prepare for 1.2.14 releasepolarssl-1.2.14 | Paul Bakker | 6 | -10/+10 | |
2015-04-29 | Add countermeasure against cache-based lucky 13 | Manuel Pégourié-Gonnard | 2 | -4/+9 | |
2015-04-23 | Fix invalid memory read in x509_get_sig() | Manuel Pégourié-Gonnard | 2 | -2/+4 | |
2015-04-23 | Fix bug in Via Padlock support | Manuel Pégourié-Gonnard | 2 | -2/+3 | |
Backport of cf201201 from the 1.3 branch | |||||
2015-04-23 | Fix hardclock with some versions of mingw64 | Manuel Pégourié-Gonnard | 2 | -1/+5 | |
Backport of 383433535 from the 1.3 branch | |||||
2015-04-23 | Fix warnings from mingw64 in timing.c | Manuel Pégourié-Gonnard | 3 | -8/+17 | |
Backport from dda52139 from the 1.3 branch | |||||
2015-04-23 | Fix potential unintended sign extension | Manuel Pégourié-Gonnard | 2 | -3/+9 | |
Backport of 6fdc4cae from the 1.3 branch | |||||
2015-04-23 | Update Changelog for the last two commits | Manuel Pégourié-Gonnard | 1 | -0/+6 | |
2015-04-10 | Fix version-major intolerance again | Manuel Pégourié-Gonnard | 1 | -3/+8 | |
This time doing minimal changes to avoid introducing other issues. |