Add test for bounds in X509 DER write funcs

This commit is contained in:
Andres AG
2016-09-07 11:09:44 +01:00
committed by Simon Butcher
parent 60dbc93831
commit e0af995f12
2 changed files with 28 additions and 4 deletions

View File

@@ -5,8 +5,8 @@ mbed TLS ChangeLog (Sorted per branch, date)
Security
* Fix potential stack corruption in mbedtls_x509write_crt_der() and
mbedtls_x509write_csr_der() when the signature is copied to the buffer
without checking whether there is enough space in the destination. It is
not triggerable remotely in SSL/TLS.
without checking whether there is enough space in the destination. The
issue cannot be triggered remotely.
Features
* Added support for CMAC for AES and 3DES and AES-CMAC-PRF-128, as defined by