ChangeLog - OpenGrok cross reference for /optee_os/lib/libmbedtls/mbedtls/ChangeLog

1109      was found by TrustInSoft Analyzer during REDOCS'22) and #1120.
1309      Fixes 'file not found with <angled> include' error
2032      More details on PCKS#11 wrapper removal can be found in the mailing list
2500      Many thanks to guidovranken who found this issue via differential fuzzing
2637      fixes a local Lucky 13 cache attack found and reported by Tuba Yavuz,
3273    * Remove the mbedtls namespacing from the header file, to fix a "file not found"
3604      (found by Catena cyber using oss-fuzz)
3680    * Fix a memory leak in mbedtls_x509_csr_parse(), found by catenacyber,
3736      curves as well as RSA. Fixes #777 found by dbedev.
4570    * Removed potential leak in mbedtls_rsa_rsassa_pkcs1_v15_sign(), found by
4682    * Fix warning when using a 64bit platform. (found by embedthis) (#275)
4688      use of mbedtls_x509_crt_profile_next. (found by NWilson)
4705    * Fix build error with CMake and pre-4.5 versions of GCC (found by Hugo
4707    * Fix bug when parsing a ServerHello without extensions (found by David
4710      (found by Benoit Lecocq).
4712      installed (found by Rawi666).
4715      (found by robotanarchy) (#232).
4717      tests (found by robotanarchy) (#232).
4723      be always used (found by dcb314) (#235)
4725      result trying to unlock an unlocked mutex on invalid input (found by
4727    * Fix -Wshadow warnings (found by hnrkp) (#240)
4729      SSL_MAX_CONTENT_LEN or higher - not triggerrable remotely (found by
4732      MBEDTLS_SHAxxx_ALT (found by Henrik) (#239)
4733    * Fix memory corruption in pkey programs (found by yankuncheng) (#210)
4775    * Headers are now found in the 'mbedtls' directory (previously 'polarssl').
4972    * Fix bug in ssl_mail_client when password is longer that username (found
4977      initialized but not set (found by pravic).
4980    * Fix handling of symlinks by "make install" (found by Gaël PORTAY).
4986    * Fix bug in Via Padlock support (found by Nikos Mavrogiannopoulos).
4987    * Fix thread safety bug in RSA operations (found by Fredrik Axelsson).
4989      versions of mingw64 (found by kxjhlele).
4990    * Fix warnings from mingw64 in timing.c (found by kxjklele).
4993    * Fix potential memory leak in ssl_set_psk() (found by Mansour Moufid).
5026      full and polarssl_free() is called (found by Mark Hasemeyer)
5031      client certificate) (found using Codenomicon Defensics).
5034      (found using Codenomicon Defensics).
5037      (found using Codenomicon Defensics).
5063      add_len (found by Jean-Philippe Aumasson) (not triggerable remotely).
5067    * User set CFLAGS were ignored by Cmake with gcc (introduced in 1.3.9, found
5071      multiple of 8 (found by Gergely Budai).
5072    * Fix unchecked return code in x509_crt_parse_path() on Windows (found by
5076      to a failed verification (found by Fredrik Axelsson).
5082      (found by Hendrik van den Boogaard).
5103      TLS 1.2 (found by Darren Bane) (introduced in 1.3.8).
5106      (found using Codenomicon Defensics).
5108      (not affected if ECC support was compiled out) (found using Codenomicon
5113    * Fix compile error in ssl_pthread_server (found by Julian Ospald).
5114    * Fix net_accept() regarding non-blocking sockets (found by Luca Pesce).
5115    * Don't print uninitialised buffer in ssl_mail_client (found by Marc Abel).
5118      are defined but not POLARSSL_HAVE_TIME (found by Stephane Di Vito).
5119    * Remove non-existent file from VS projects (found by Peter Vaskovic).
5126    * Fix compiler warnings on iOS (found by Sander Niemeijer).
5129    * Fix potential bad read in parsing ServerHello (found by Adrien
5149    * Fix length checking for AEAD ciphersuites (found by Codenomicon).
5184      size (found by TrustInSoft)
5185    * Fix WSAStartup() return value check (found by Peter Vaskovic)
5186    * Other minor issues (found by Peter Vaskovic)
5187    * Fix symlink command for cross compiling with CMake (found by Andre
5189    * Fix DER output of gen_key app (found by Gergely Budai)
5202    * Fix preprocessor checks for bn_mul PPC asm (found by Barry K. Nathan).
5204      interpret semicolons as comment delimiters (found by Barry K. Nathan).
5210    * Disable broken Sparc64 bn_mul assembly (found by Florian Obser).
5213    * Fix mpi_write_string() to write "00" as hex output for empty MPI (found
5233      (found by Matthew Page)
5234    * Typos in platform.c and pkcs11.c (found by Daniel Phillips and Steffan
5240      ServerHello when no extensions are present (found by Matthew Page)
5247    * Fix detection of DragonflyBSD in net.c (found by Markus Pfeiffer)
5249      (found by Barry K. Nathan)
5275    * Prevent potential NULL pointer dereference in ssl_read_record() (found by
5283    * Fixed malloc/free default #define in platform.c (found by Gergely Budai).
5284    * Fixed type which made POLARSSL_ENTROPY_FORCE_SHA256 uneffective (found by
5287      (found by Gergely Budai)
5288    * Fix compile errors when POLARSSL_ERROR_STRERROR_BC is undefined (found by
5296      indication (found by Thijs Alkemade)
5298      stored in RAM due to missing 'const's (found by Gergely Budai).
5332    * Possible remotely-triggered out-of-bounds memory access fixed (found by
5372    * net module handles timeouts on blocking sockets better (found by Tilman
5377    * Missing MPI_CHK calls added around unguarded mpi calls (found by
5411    * Added missing MPI_CHK() around some statements in mpi_div_mpi() (found by
5414      ssl_write_certificate() (found by TrustInSoft)
5417    * Possible remotely-triggered out-of-bounds memory access fixed (found by
5439    * Fix ECDSA corner case: missing reduction mod N (found by DualTachyon)
5525      (found by Cyril Arnaud and Pierre-Alain Fouque)
5532      crash it remotely (found by Caj Larsson).
5535      (found using Codenomicon Defensics).
5540    * Fix bug in Via Padlock support (found by Nikos Mavrogiannopoulos).
5542      versions of mingw64 (found by kxjhlele).
5543    * Fix warnings from mingw64 in timing.c (found by kxjklele).
5545      platforms (found with Coverity Scan).
5554      for a client certificate) (found using Codenomicon Defensics).
5557      (found using Codenomicon Defensics).
5560      found using Codenomicon Defensics).
5568      add_len (found by Jean-Philippe Aumasson) (not triggerable remotely).
5571    * Fix unchecked return code in x509_crt_parse_path() on Windows (found by
5575      to a failed verification (found by Fredrik Axelsson).
5581      (found by Hendrik van den Boogaard).
5596    * Fix potential bad read in parsing ServerHello (found by Adrien
5601    * Fix compiler warnings on iOS (found by Sander Niemeijer).
5602    * Don't print uninitialised buffer in ssl_mail_client (found by Marc Abel).
5603    * Fix net_accept() regarding non-blocking sockets (found by Luca Pesce).
5636    * Prevent potential NULL pointer dereference in ssl_read_record() (found by
5638    * Fix length checking for AEAD ciphersuites (found by Codenomicon).
5647    * Added missing MPI_CHK() around some statements in mpi_div_mpi() (found by
5650      ssl_write_certificate() (found by TrustInSoft)
5670      when no extensions are present (found by Matthew Page)
5675    * Fix detection of DragonflyBSD in net.c (found by Markus Pfeiffer)
5677      size (found by TrustInSoft)
5678    * Fix preprocessor checks for bn_mul PPC asm (found by Barry K. Nathan).
5680      interpret semicolons as comment delimiters (found by Barry K. Nathan).
5681    * Disable broken Sparc64 bn_mul assembly (found by Florian Obser).
5700    * Fixed potential file descriptor leaks (found by Remi Gacogne)
5707      (found by Cyril Arnaud and Pierre-Alain Fouque)
5743      PEM-encoded certificates has been fixed (found by Jack Lloyd)
5761      128-bits (found by Yawning Angel)
5831    * Allow R and A to point to same mpi in mpi_div_mpi (found by Manuel
5833    * Fixed possible segfault in mpi_shift_r() (found by Manuel
5886    * Fixed handling error in mpi_cmp_mpi() on longer B values (found by
5897      with carry rollover (found by Ruslan Yushchenko)
5902    * Fixed potential memory zeroization on miscrafted RSA key (found by Eloi
5911    * Potential buffer-overflow for ssl_read_record() (independently found by
5930      PEM-encoded certificates has been fixed (found by Jack Lloyd)
5958    * Fixed possible segfault in mpi_shift_r() (found by Manuel
5960    * Allow R and A to point to same mpi in mpi_div_mpi (found by Manuel
5969    * Fixed potential memory zeroization on miscrafted RSA key (found by Eloi
5984    * Fixed handling error in mpi_cmp_mpi() on longer B values (found by
5988    * Fixed potential memory corruption on miscrafted client messages (found by
5990    * Fixed generation of DHM parameters to correct length (found by Ruslan
5996      (Closes ticket #47, found by Hugo Leisink)
6123      platform (32-bit / 64-bit) (Fixes ticket #19, found by Mads
6126      #18, found by Nikolay Epifanov)
6147      (found by Mads Kiilerich)
6149      certificates (found by Mads Kiilerich)
6153      found by Boris Krasnovskiy)
6208    * Fixed CMake out of source build for tests (found by
6241      ssl_write_certificate_request() (found by fatbob)
6243      (found by Frank de Brabander)
6244    * Fixed algorithmic bug in mpi_is_prime() (found by
6255    * Changed typo in #ifdef in x509parse.c (found
6275    * Fixed include location of endian.h on FreeBSD (found by
6278      Apples (found by Martin van Hensbergen)
6281      (found by code coverage tests)
6283      POLARSSL_HAVE_LONGLONG not defined (found by Giles
6286      mpi_read_string() (found by code coverage tests).
6288      rsa_check_pubkey() and rsa_check_privkey() (found by
6291      value in mpi_add_abs() (found by code coverage tests).
6293      value in mpi_sub_abs() (found by code coverage tests).
6296      change also affects mpi_write_string() (found by code
6298    * Corrected is_prime() results for 0, 1 and 2 (found by
6309      (found by Pierre Habouzit).
6316      handling of 'full' certificate chains (found by Mathias
6330      (found by Felix von Leitner).
6339      rsa_pkcs1_decrypt (found by Christophe Devine)
6352       not be swapped in the SSLv2 ClientHello (found by Greg Robson)