4ca9a45756
Merge remote-tracking branch 'public/pr/1560' into development-proposed
...
* public/pr/1560:
Warn if using a memory sanitizer on AESNI
2018-04-11 13:06:30 +02:00
e72d3225a7
Merge remote-tracking branch 'public/pr/1559' into development-proposed
...
* public/pr/1559:
Make the memset call prior to FD_ZERO conditional to needing it
2018-04-11 13:05:31 +02:00
bf027e736a
Minor modifications after PR review
...
1. Move ChangLog entry to correct location
2. Move point formats outside the ECP_ALT check, as it's part of the RFC
2018-04-09 15:51:19 +03:00
8339c8f5bd
x509.c: Remove unused includes
...
Remove unused includes guarded by MBEDTLS_FS_IO, which doesn't appear
anywhere else in the file.
2018-04-06 16:47:43 -07:00
df60856702
Only redefine _WIN32_WINNT macro when < 0x0501
2018-04-06 18:07:53 +02:00
7869680e41
Updated abi_check.py docstrings
2018-04-06 11:23:22 +01:00
fe60132305
Move a buffer size test before the first relevant read
2018-04-05 16:53:35 +02:00
c33c7c8363
Copy DartConfiguration.tcl, needed for make memcheck
2018-04-05 15:59:45 +02:00
5053efde33
Warn if using a memory sanitizer on AESNI
...
Clang-Msan is known to report spurious errors when MBEDTLS_AESNI_C is
enabled, due to the use of assembly code. The error reports don't
mention AES, so they can be difficult to trace back to the use of
AES-NI. Warn about this potential problem at compile time.
2018-04-05 15:37:38 +02:00
ec4733b645
Make the memset call prior to FD_ZERO conditional to needing it
...
Zeroing out an fd_set before calling FD_ZERO on it is in principle
useless, but without it some memory sanitizers think the fd_set is
still uninitialized after FD_ZERO (e.g. clang-msan/Glibc/x86_64 where
FD_ZERO is implemented in assembly). Make the zeroing conditional on
using a memory sanitizer.
2018-04-05 14:55:47 +02:00
94d49978eb
Improve comments style
2018-04-05 14:48:55 +02:00
cd09fc812d
Remove a redundant test
2018-04-05 14:48:18 +02:00
73b183c3bb
Add buffer size check before cert_type_len read
2018-04-05 10:20:09 +02:00
533407a266
Use "#!/usr/bin/env perl" as shebang line.
2018-04-04 21:44:29 +00:00
80aa3b8d65
Merge branch 'pr_946' into development-proposed
2018-04-04 10:33:45 +02:00
5c77f2ef37
Merge remote-tracking branch 'upstream-public/pr/1535' into development-proposed
2018-04-04 10:31:09 +02:00
e4d3b7f860
Fix merge glitch in ChangeLog
2018-04-04 09:28:48 +02:00
b9e8696d56
Merge remote-tracking branch 'upstream-public/pr/1142' into development-proposed
2018-04-04 09:20:59 +02:00
315b460593
Merge remote-tracking branch 'upstream-public/pr/1457' into development-proposed
2018-04-04 09:19:27 +02:00
73db8380ca
Merge remote-tracking branch 'upstream-public/pr/1547' into development-proposed
2018-04-04 09:19:12 +02:00
be2371c3d9
Merge branch 'pr_348' into development-proposed
2018-04-04 09:18:27 +02:00
557e77d9a3
Add ChangeLog entry
2018-04-04 09:18:11 +02:00
a09453f495
Merge branch 'pr_1395' into development-proposed
2018-04-04 09:14:12 +02:00
d6953b58d7
Improve changelog entry
2018-04-04 09:09:29 +02:00
1fae860f0f
Merge remote-tracking branch 'upstream-public/pr/1543' into development-proposed
2018-04-04 09:03:25 +02:00
f4e5b7e87d
Additionally initialize fd_set's via memset in mbedtls_net_poll
...
The initialization via FD_SET is not seen by memory sanitizers if
FD_SET is implemented through assembly. Additionally zeroizing the
respective fd_set's before calling FD_SET contents the sanitizers
and comes at a negligible computational overhead.
2018-04-03 16:28:09 +01:00
b364053a87
pk_sign: add stdlib include
2018-04-03 06:16:04 -04:00
0cbe816bfc
ChangeLog updated and returning proper value
2018-04-02 10:01:16 -05:00
19d392b258
Fix compatibility problem in the printed message
...
Replace %zu with %lu and add cast for the printed value.
2018-04-02 07:35:50 -07:00
810e650c70
Adjust more modules to new design
...
Add `ecp.h` anf `timing.h` to new XXX_alt design
2018-04-01 15:59:58 +03:00
1c9f9be9a2
update ChangeLog
...
Update ChangeLog with suggested rephrasing
2018-04-01 15:14:07 +03:00
4e6d55d14d
Add new modules to the refactoring
...
Add new alternative supported modules to the new arcitecture design
2018-04-01 15:12:46 +03:00
b2aacec417
Take Cryptographic API outside the XXX_ALT check
...
The cryptographic API should not be related to whether or not
there is alternative implementation. The API should be same for regular
implementation, and for alternative implementation, so it is defined
outside of the XXX_ALT precompilation check in the cryptographic API header
2018-04-01 15:12:46 +03:00
90a8b5219f
Merge branch 'pr_1480' into development-proposed
2018-04-01 12:44:06 +02:00
092bf3dd38
Add original PR reference
2018-04-01 12:43:48 +02:00
0ed632f445
Merge remote-tracking branch 'upstream-public/pr/1499' into development-proposed
2018-04-01 12:41:22 +02:00
5e4464e392
Merge remote-tracking branch 'upstream-public/pr/1539' into development-proposed
2018-04-01 12:40:37 +02:00
695d557dcf
Merge branch 'pr_1180' into development-proposed
2018-04-01 12:26:36 +02:00
4045c74421
Minor changelog improvement
2018-04-01 12:25:48 +02:00
c96ccf4b3f
Add ChangeLog entry to credit independent contribution
...
Also: fixes #1437
2018-03-31 22:57:03 +02:00
039fd12834
Robustness fix in mbedtls_ssl_derive_keys
...
In mbedtls_ssl_derive_keys, don't call mbedtls_md_hmac_starts in
ciphersuites that don't use HMAC. This doesn't change the behavior of
the code, but avoids relying on an uncaught error when attempting to
start an HMAC operation that hadn't been initialized.
2018-03-31 22:53:49 +02:00
cc78ac46e7
Update error.c
2018-03-30 18:52:10 +02:00
5114d3e4e1
Clarify the use of MBEDTLS_ERR_PK_SIG_LEN_MISMATCH
...
Clarify what MBEDTLS_ERR_ECP_SIG_LEN_MISMATCH and
MBEDTLS_ERR_PK_SIG_LEN_MISMATCH mean. Add comments to highlight that
this indicates that a valid signature is present, unlike other error
codes. See
https://github.com/ARMmbed/mbedtls/pull/1149#discussion_r178130705
2018-03-30 18:43:16 +02:00
eea1c4ee5a
Improve documentation of mbedtls_ssl_write()
2018-03-29 16:41:09 +01:00
08f3ef1861
Basic support for Curve448, similar to the current level of support for Curve25519
2018-03-29 14:29:06 +01:00
a357f1a6ca
Move changelog entry to bugfix from changes
2018-03-29 08:17:15 -04:00
19d1373bb9
Enable SSL test scripts to dump logs on stdout
2018-03-29 11:10:57 +01:00
4ba87fc958
Merge remote-tracking branch 'upstream-public/pr/758' into development-proposed
2018-03-29 11:01:38 +01:00
2ad47e3bcc
Merge remote-tracking branch 'upstream-public/pr/1528' into development-proposed
2018-03-29 11:00:50 +01:00
78a03ec230
Merge remote-tracking branch 'upstream-public/pr/1379' into development-proposed
2018-03-29 10:57:57 +01:00
