Mbed-TLS/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-08-22 11:09:54 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #974 from ronald-cron-arm/buffer-overflow-in-cid-fix-2.28

Browse Source 
[2.28 Backport] Fix in_cid buffer size in transform structure
This commit is contained in:
Manuel Pégourié-Gonnard
2022-11-18 09:48:15 +01:00
committed by GitHub
parent c4698502d6 7345073aaf
commit 597e87eb48
2 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ChangeLog.d/fix-in-cid-buffer-size.txt
+4
View File
@@ -0,0 +1,4 @@
Security
* Fix potential heap buffer overread and overwrite in DTLS if
MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and
MBEDTLS_SSL_CID_IN_LEN_MAX > 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
include/mbedtls/ssl_internal.h
+1 -1
View File
@@ -782,7 +782,7 @@ struct mbedtls_ssl_transform
#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
uint8_t in_cid_len;
uint8_t out_cid_len;
unsigned char in_cid [ MBEDTLS_SSL_CID_OUT_LEN_MAX ];
unsigned char in_cid [ MBEDTLS_SSL_CID_IN_LEN_MAX ];
unsigned char out_cid[ MBEDTLS_SSL_CID_OUT_LEN_MAX ];
#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */