ChangeLog - OpenGrok cross reference for /optee_os/lib/libmbedtls/mbedtls/ChangeLog

1152      was found by TrustInSoft Analyzer during REDOCS'22) and #1120.
1352      Fixes 'file not found with <angled> include' error
2075      More details on PCKS#11 wrapper removal can be found in the mailing list
2543      Many thanks to guidovranken who found this issue via differential fuzzing
2680      fixes a local Lucky 13 cache attack found and reported by Tuba Yavuz,
3316    * Remove the mbedtls namespacing from the header file, to fix a "file not found"
3647      (found by Catena cyber using oss-fuzz)
3723    * Fix a memory leak in mbedtls_x509_csr_parse(), found by catenacyber,
3779      curves as well as RSA. Fixes #777 found by dbedev.
4613    * Removed potential leak in mbedtls_rsa_rsassa_pkcs1_v15_sign(), found by
4725    * Fix warning when using a 64bit platform. (found by embedthis) (#275)
4731      use of mbedtls_x509_crt_profile_next. (found by NWilson)
4748    * Fix build error with CMake and pre-4.5 versions of GCC (found by Hugo
4750    * Fix bug when parsing a ServerHello without extensions (found by David
4753      (found by Benoit Lecocq).
4755      installed (found by Rawi666).
4758      (found by robotanarchy) (#232).
4760      tests (found by robotanarchy) (#232).
4766      be always used (found by dcb314) (#235)
4768      result trying to unlock an unlocked mutex on invalid input (found by
4770    * Fix -Wshadow warnings (found by hnrkp) (#240)
4772      SSL_MAX_CONTENT_LEN or higher - not triggerrable remotely (found by
4775      MBEDTLS_SHAxxx_ALT (found by Henrik) (#239)
4776    * Fix memory corruption in pkey programs (found by yankuncheng) (#210)
4818    * Headers are now found in the 'mbedtls' directory (previously 'polarssl').
5015    * Fix bug in ssl_mail_client when password is longer that username (found
5020      initialized but not set (found by pravic).
5023    * Fix handling of symlinks by "make install" (found by Gaël PORTAY).
5029    * Fix bug in Via Padlock support (found by Nikos Mavrogiannopoulos).
5030    * Fix thread safety bug in RSA operations (found by Fredrik Axelsson).
5032      versions of mingw64 (found by kxjhlele).
5033    * Fix warnings from mingw64 in timing.c (found by kxjklele).
5036    * Fix potential memory leak in ssl_set_psk() (found by Mansour Moufid).
5069      full and polarssl_free() is called (found by Mark Hasemeyer)
5074      client certificate) (found using Codenomicon Defensics).
5077      (found using Codenomicon Defensics).
5080      (found using Codenomicon Defensics).
5106      add_len (found by Jean-Philippe Aumasson) (not triggerable remotely).
5110    * User set CFLAGS were ignored by Cmake with gcc (introduced in 1.3.9, found
5114      multiple of 8 (found by Gergely Budai).
5115    * Fix unchecked return code in x509_crt_parse_path() on Windows (found by
5119      to a failed verification (found by Fredrik Axelsson).
5125      (found by Hendrik van den Boogaard).
5146      TLS 1.2 (found by Darren Bane) (introduced in 1.3.8).
5149      (found using Codenomicon Defensics).
5151      (not affected if ECC support was compiled out) (found using Codenomicon
5156    * Fix compile error in ssl_pthread_server (found by Julian Ospald).
5157    * Fix net_accept() regarding non-blocking sockets (found by Luca Pesce).
5158    * Don't print uninitialised buffer in ssl_mail_client (found by Marc Abel).
5161      are defined but not POLARSSL_HAVE_TIME (found by Stephane Di Vito).
5162    * Remove non-existent file from VS projects (found by Peter Vaskovic).
5169    * Fix compiler warnings on iOS (found by Sander Niemeijer).
5172    * Fix potential bad read in parsing ServerHello (found by Adrien
5192    * Fix length checking for AEAD ciphersuites (found by Codenomicon).
5227      size (found by TrustInSoft)
5228    * Fix WSAStartup() return value check (found by Peter Vaskovic)
5229    * Other minor issues (found by Peter Vaskovic)
5230    * Fix symlink command for cross compiling with CMake (found by Andre
5232    * Fix DER output of gen_key app (found by Gergely Budai)
5245    * Fix preprocessor checks for bn_mul PPC asm (found by Barry K. Nathan).
5247      interpret semicolons as comment delimiters (found by Barry K. Nathan).
5253    * Disable broken Sparc64 bn_mul assembly (found by Florian Obser).
5256    * Fix mpi_write_string() to write "00" as hex output for empty MPI (found
5276      (found by Matthew Page)
5277    * Typos in platform.c and pkcs11.c (found by Daniel Phillips and Steffan
5283      ServerHello when no extensions are present (found by Matthew Page)
5290    * Fix detection of DragonflyBSD in net.c (found by Markus Pfeiffer)
5292      (found by Barry K. Nathan)
5318    * Prevent potential NULL pointer dereference in ssl_read_record() (found by
5326    * Fixed malloc/free default #define in platform.c (found by Gergely Budai).
5327    * Fixed type which made POLARSSL_ENTROPY_FORCE_SHA256 uneffective (found by
5330      (found by Gergely Budai)
5331    * Fix compile errors when POLARSSL_ERROR_STRERROR_BC is undefined (found by
5339      indication (found by Thijs Alkemade)
5341      stored in RAM due to missing 'const's (found by Gergely Budai).
5375    * Possible remotely-triggered out-of-bounds memory access fixed (found by
5415    * net module handles timeouts on blocking sockets better (found by Tilman
5420    * Missing MPI_CHK calls added around unguarded mpi calls (found by
5454    * Added missing MPI_CHK() around some statements in mpi_div_mpi() (found by
5457      ssl_write_certificate() (found by TrustInSoft)
5460    * Possible remotely-triggered out-of-bounds memory access fixed (found by
5482    * Fix ECDSA corner case: missing reduction mod N (found by DualTachyon)
5568      (found by Cyril Arnaud and Pierre-Alain Fouque)
5575      crash it remotely (found by Caj Larsson).
5578      (found using Codenomicon Defensics).
5583    * Fix bug in Via Padlock support (found by Nikos Mavrogiannopoulos).
5585      versions of mingw64 (found by kxjhlele).
5586    * Fix warnings from mingw64 in timing.c (found by kxjklele).
5588      platforms (found with Coverity Scan).
5597      for a client certificate) (found using Codenomicon Defensics).
5600      (found using Codenomicon Defensics).
5603      found using Codenomicon Defensics).
5611      add_len (found by Jean-Philippe Aumasson) (not triggerable remotely).
5614    * Fix unchecked return code in x509_crt_parse_path() on Windows (found by
5618      to a failed verification (found by Fredrik Axelsson).
5624      (found by Hendrik van den Boogaard).
5639    * Fix potential bad read in parsing ServerHello (found by Adrien
5644    * Fix compiler warnings on iOS (found by Sander Niemeijer).
5645    * Don't print uninitialised buffer in ssl_mail_client (found by Marc Abel).
5646    * Fix net_accept() regarding non-blocking sockets (found by Luca Pesce).
5679    * Prevent potential NULL pointer dereference in ssl_read_record() (found by
5681    * Fix length checking for AEAD ciphersuites (found by Codenomicon).
5690    * Added missing MPI_CHK() around some statements in mpi_div_mpi() (found by
5693      ssl_write_certificate() (found by TrustInSoft)
5713      when no extensions are present (found by Matthew Page)
5718    * Fix detection of DragonflyBSD in net.c (found by Markus Pfeiffer)
5720      size (found by TrustInSoft)
5721    * Fix preprocessor checks for bn_mul PPC asm (found by Barry K. Nathan).
5723      interpret semicolons as comment delimiters (found by Barry K. Nathan).
5724    * Disable broken Sparc64 bn_mul assembly (found by Florian Obser).
5743    * Fixed potential file descriptor leaks (found by Remi Gacogne)
5750      (found by Cyril Arnaud and Pierre-Alain Fouque)
5786      PEM-encoded certificates has been fixed (found by Jack Lloyd)
5804      128-bits (found by Yawning Angel)
5874    * Allow R and A to point to same mpi in mpi_div_mpi (found by Manuel
5876    * Fixed possible segfault in mpi_shift_r() (found by Manuel
5929    * Fixed handling error in mpi_cmp_mpi() on longer B values (found by
5940      with carry rollover (found by Ruslan Yushchenko)
5945    * Fixed potential memory zeroization on miscrafted RSA key (found by Eloi
5954    * Potential buffer-overflow for ssl_read_record() (independently found by
5973      PEM-encoded certificates has been fixed (found by Jack Lloyd)
6001    * Fixed possible segfault in mpi_shift_r() (found by Manuel
6003    * Allow R and A to point to same mpi in mpi_div_mpi (found by Manuel
6012    * Fixed potential memory zeroization on miscrafted RSA key (found by Eloi
6027    * Fixed handling error in mpi_cmp_mpi() on longer B values (found by
6031    * Fixed potential memory corruption on miscrafted client messages (found by
6033    * Fixed generation of DHM parameters to correct length (found by Ruslan
6039      (Closes ticket #47, found by Hugo Leisink)
6166      platform (32-bit / 64-bit) (Fixes ticket #19, found by Mads
6169      #18, found by Nikolay Epifanov)
6190      (found by Mads Kiilerich)
6192      certificates (found by Mads Kiilerich)
6196      found by Boris Krasnovskiy)
6251    * Fixed CMake out of source build for tests (found by
6284      ssl_write_certificate_request() (found by fatbob)
6286      (found by Frank de Brabander)
6287    * Fixed algorithmic bug in mpi_is_prime() (found by
6298    * Changed typo in #ifdef in x509parse.c (found
6318    * Fixed include location of endian.h on FreeBSD (found by
6321      Apples (found by Martin van Hensbergen)
6324      (found by code coverage tests)
6326      POLARSSL_HAVE_LONGLONG not defined (found by Giles
6329      mpi_read_string() (found by code coverage tests).
6331      rsa_check_pubkey() and rsa_check_privkey() (found by
6334      value in mpi_add_abs() (found by code coverage tests).
6336      value in mpi_sub_abs() (found by code coverage tests).
6339      change also affects mpi_write_string() (found by code
6341    * Corrected is_prime() results for 0, 1 and 2 (found by
6352      (found by Pierre Habouzit).
6359      handling of 'full' certificate chains (found by Mathias
6373      (found by Felix von Leitner).
6382      rsa_pkcs1_decrypt (found by Christophe Devine)
6395       not be swapped in the SSLv2 ClientHello (found by Greg Robson)