Merge branch 'IOTSSL-628-BufferOverread'

This commit is contained in:
Simon Butcher
2016-03-16 22:53:11 +00:00
2 changed files with 9 additions and 2 deletions

View File

@@ -11,6 +11,9 @@ Security
* Fix potential integer overflow to buffer overflow in
mbedtls_rsa_rsaes_pkcs1_v15_encrypt and mbedtls_rsa_rsaes_oaep_encrypt
(not triggerable remotely in (D)TLS).
* Fix a potential integer underflow to buffer overread in
mbedtls_rsa_rsaes_oaep_decrypt. It is not triggerable remotely in
SSL/TLS.
Bugfix
* Fix bug in mbedtls_mpi_add_mpi() that caused wrong results when the three