fix for issue 1118: check if iv is zero in gcm.

1) found by roberto in mbedtls forum
2) if iv_len is zero, return an error
3) add tests for invalid parameters
This commit is contained in:
Ron Eldor
2016-12-16 16:15:56 +02:00
committed by Simon Butcher
parent 2a47be5012
commit 5a21fd62bf
9 changed files with 76 additions and 3 deletions

View File

@@ -1,6 +1,10 @@
mbed TLS ChangeLog (Sorted per branch, date)
= mbed TLS 2.x.x released xxxx-xx-xx
= mbed TLS x.x.x branch released xxxx-xx-xx
Bugfix
* Add a check if iv_len is zero, and return an error if it is zero. reported
by roberto. #716
Security
* Fix authentication bypass in SSL/TLS: when auth_mode is set to optional,