SwitchEmu/mbedtls
1
0
Fork 0
mirror of https://git.suyu.dev/suyu/mbedtls.git synced 2026-03-25 08:28:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge of fix for IOTSSL-481 - Double free

Browse Source 
Potential double free in mbedtls_ssl_conf_psk()
This commit is contained in:
Simon Butcher
2015-10-05 10:40:31 +01:00
parent c48b66bfb6 24417f06fe
commit fec73a8eec
2 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
ChangeLog
View File

@@ -25,6 +25,9 @@ Security
* Fix possible heap buffer overflow in base64_encoded() when the input
buffer is 512MB or larger on 32-bit platforms. Found by Guido Vranken,
Intelworks. Not trigerrable remotely in TLS.
* Fix potential double-free if mbedtls_conf_psk() is called repeatedly on
the same mbedtls_ssl_config object and memory allocation fails. Found by
Guido Vranken, Intelworks. Cannot be forced remotely.
Changes
* Added checking of hostname length in mbedtls_ssl_set_hostname() to ensure