Andres Amaya Garcia 
							
						 
					 
					
						
						
							
						
						6a54336897 
					 
					
						
						
							
							Fix integer overflows in buffer bound checks  
						
						... 
						
						
						
						Fix potential integer overflows in the following functions:
  * mbedtls_md2_update() to be bypassed and cause
  * mbedtls_cipher_update()
  * mbedtls_ctr_drbg_reseed()
This overflows would mainly be exploitable in 32-bit systems and could
cause buffer bound checks to be bypassed. 
						
						
					 
					
						2017-02-15 23:31:07 +02:00 
						 
				 
			
				
					
						
							
							
								Simon Butcher 
							
						 
					 
					
						
						
							
						
						71c7ac5597 
					 
					
						
						
							
							Corrects incorrectly named function in ctr_drbg.c comment  
						
						
						
						
					 
					
						2016-05-10 23:47:30 +01:00 
						 
				 
			
				
					
						
							
							
								Simon Butcher 
							
						 
					 
					
						
						
							
						
						295639bfa1 
					 
					
						
						
							
							Fixes minor typos in comments in pk.h and ctr_drbg.c  
						
						... 
						
						
						
						Fixes typos in PRs #475  and #437  
						
						
					 
					
						2016-05-10 19:39:36 +01:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						37ff14062e 
					 
					
						
						
							
							Change main license to Apache 2.0  
						
						
						
						
					 
					
						2015-09-04 14:21:07 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						6fb8187279 
					 
					
						
						
							
							Update date in copyright line  
						
						
						
						
					 
					
						2015-07-28 17:11:58 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						ccc302692a 
					 
					
						
						
							
							Fix bug introduced when splitting init functions  
						
						
						
						
					 
					
						2015-05-11 14:35:42 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						0a4fb09534 
					 
					
						
						
							
							Make xxx_drbg_random() thread-safe  
						
						
						
						
					 
					
						2015-05-11 14:35:41 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						8d128efd48 
					 
					
						
						
							
							Split mbedtls_ctr_drbg_init() -> seed()  
						
						
						
						
					 
					
						2015-04-28 22:38:08 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						2cf5a7c98e 
					 
					
						
						
							
							The Great Renaming  
						
						... 
						
						
						
						A simple execution of tmp/invoke-rename.pl 
						
						
					 
					
						2015-04-08 13:25:31 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						932e3934bd 
					 
					
						
						
							
							Fix typos & Co  
						
						
						
						
					 
					
						2015-04-03 18:46:55 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						57a26da593 
					 
					
						
						
							
							Merge branch 'mbedtls-1.3' into development  
						
						... 
						
						
						
						* mbedtls-1.3:
  Use link-time garbage collection in memory.sh
  scripts/memory.sh only work on Linux
  Add missing 'const' on selftest data
  Use only headers for doxygen (no doc in C files)
  Add missing extern "C" guard in aesni.h
  Fix compile error with renego disabled
  Remove slow PKCS5 test
  Stop checking key-cert match systematically
  Make tests/*.sh runnable from anywhere
  Update visual C files 
						
						
					 
					
						2015-03-11 10:30:21 +00:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						28122e4329 
					 
					
						
						
							
							Add missing 'const' on selftest data  
						
						
						
						
					 
					
						2015-03-11 09:13:42 +00:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						7f8099773e 
					 
					
						
						
							
							Rename include directory to mbedtls  
						
						
						
						
					 
					
						2015-03-10 11:23:56 +00:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						fe44643b0e 
					 
					
						
						
							
							Rename website and repository  
						
						
						
						
					 
					
						2015-03-06 13:17:10 +00:00 
						 
				 
			
				
					
						
							
							
								Rich Evans 
							
						 
					 
					
						
						
							
						
						00ab47026b 
					 
					
						
						
							
							cleanup library and some basic tests. Includes, add guards to includes  
						
						
						
						
					 
					
						2015-02-10 11:28:46 +00:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						860b51642d 
					 
					
						
						
							
							Fix url again  
						
						
						
						
					 
					
						2015-01-28 17:12:07 +00:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						085ab040aa 
					 
					
						
						
							
							Fix website url to use https.  
						
						
						
						
					 
					
						2015-01-23 11:06:27 +00:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						9698f5852c 
					 
					
						
						
							
							Remove maintainer line.  
						
						
						
						
					 
					
						2015-01-23 10:59:00 +00:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						19f6b5dfaa 
					 
					
						
						
							
							Remove redundant "all rights reserved"  
						
						
						
						
					 
					
						2015-01-23 10:54:00 +00:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						a658a4051b 
					 
					
						
						
							
							Update copyright  
						
						
						
						
					 
					
						2015-01-23 09:55:24 +00:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						967a2a5f8c 
					 
					
						
						
							
							Change name to mbed TLS in the copyright notice  
						
						
						
						
					 
					
						2015-01-22 14:28:16 +00:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						5cb4b31057 
					 
					
						
						
							
							Fix missing bound check  
						
						
						
						
					 
					
						2015-01-13 14:58:00 +01:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						fff0366bba 
					 
					
						
						
							
							Add ctr_drbg_free()  
						
						
						
						
					 
					
						2014-07-09 10:19:23 +02:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						c7ea99af4f 
					 
					
						
						
							
							Add _init() and _free() for cipher modules  
						
						
						
						
					 
					
						2014-07-09 10:19:22 +02:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						66d5d076f7 
					 
					
						
						
							
							Fix formatting in various code to match spacing from coding style  
						
						
						
						
					 
					
						2014-06-17 17:06:47 +02:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						b9e4e2c97a 
					 
					
						
						
							
							Fix formatting: fix some 'easy' > 80 length lines  
						
						
						
						
					 
					
						2014-05-01 14:18:25 +02:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						9af723cee7 
					 
					
						
						
							
							Fix formatting: remove trailing spaces, #endif with comments (> 10 lines)  
						
						
						
						
					 
					
						2014-05-01 13:03:14 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						cef4ad2509 
					 
					
						
						
							
							Adapt sources to configurable config.h name  
						
						
						
						
					 
					
						2014-04-30 16:40:20 +02:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						4c284c9141 
					 
					
						
						
							
							Removed LCOV directives from code  
						
						
						
						
					 
					
						2014-03-26 15:33:05 +01:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						9592485d0c 
					 
					
						
						
							
							Fix some MSVC12 conversion warnings  
						
						
						
						
					 
					
						2014-03-21 12:03:07 +01:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						7dc4c44267 
					 
					
						
						
							
							Library files moved to use platform layer  
						
						
						
						
					 
					
						2014-02-06 13:20:16 +01:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						446ee6618f 
					 
					
						
						
							
							Add LCOV_EXCLUDE_LINE on some IO errors  
						
						
						
						
					 
					
						2014-02-01 10:08:26 +01:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						b3b205e081 
					 
					
						
						
							
							Clean up details in ctr_drbg_selftest()  
						
						
						
						
					 
					
						2014-01-31 12:04:06 +01:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						7c59363a85 
					 
					
						
						
							
							Remove a few dead stores  
						
						
						
						
					 
					
						2014-01-22 13:02:39 +01:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						b9cfaa0c7f 
					 
					
						
						
							
							Explicit conversions and minor changes to prevent MSVC compiler warnings  
						
						
						
						
					 
					
						2013-10-14 15:50:40 +02:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						18f0341aed 
					 
					
						
						
							
							Typo in comments in ctr_drbg.c  
						
						
						
						
					 
					
						2013-09-11 11:05:56 +02:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						534f82c77a 
					 
					
						
						
							
							Made ctr_drbg_init_entropy_len() non-static and defined  
						
						
						
						
					 
					
						2013-06-25 16:47:55 +02:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						b6c5d2e1a6 
					 
					
						
						
							
							Cleanup up non-prototyped functions (static) and const-correctness  
						
						... 
						
						
						
						More fixes based on the compiler directives -Wcast-qual -Wwrite-strings
-Wmissing-prototypes -Wmissing-declarations. Not everything with regards
to -Wcast-qual has been fixed as some have unwanted consequences for the
rest of the code. 
						
						
					 
					
						2013-06-25 16:25:17 +02:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						c72d3f7d85 
					 
					
						
						
							
							Possible resource leak on FILE* removed in CTR_DRBG  
						
						
						
						
					 
					
						2013-05-14 13:22:41 +02:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						9a73632fd9 
					 
					
						
						
							
							- Merged changesets 1399 up to and including 1415 into 1.2 branch  
						
						
						
						
					 
					
						2012-11-14 12:39:52 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						369e14bbf1 
					 
					
						
						
							
							- Small code rewrite  
						
						
						
						
					 
					
						2012-04-18 14:16:09 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						e88186d2ff 
					 
					
						
						
							
							- Fixed selftest for CTR_DRBG  
						
						
						
						
					 
					
						2012-01-22 20:29:47 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						69e095cc15 
					 
					
						
						
							
							- Changed the behaviour of x509parse_parse_crt for permissive parsing. Now returns the number of 'failed certificates' instead of having a switch to enable it.  
						
						... 
						
						
						
						- As a consequence all error code that were positive were changed. A lot of MALLOC_FAILED and FILE_IO_ERROR error codes added for different modules.
 - Programs and tests were adapted accordingly 
						
						
					 
					
						2011-12-10 21:55:01 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						18d32911c0 
					 
					
						
						
							
							- Added internal ctr_drbg_init_entropy_len() to allow NIST determined entropy tests to work  
						
						
						
						
					 
					
						2011-12-10 21:42:49 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						fc754a9178 
					 
					
						
						
							
							- Addedd writing and updating of seedfiles as functions to CTR_DRBG  
						
						
						
						
					 
					
						2011-12-05 13:23:51 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						1bc9efc00a 
					 
					
						
						
							
							- Fixed const correctness  
						
						... 
						
						
						
						- Added ctr_drbg_update for non-fixed data lengths
 - Fixed void pointer arithmetic 
						
						
					 
					
						2011-12-03 11:29:32 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						23fd5ea667 
					 
					
						
						
							
							- Fixed a potential loop bug  
						
						
						
						
					 
					
						2011-11-29 15:56:12 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						2bc7cf16fe 
					 
					
						
						
							
							- Cleaned up and further documented CTR_DRBG code  
						
						
						
						
					 
					
						2011-11-29 10:50:51 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						0e04d0e9a3 
					 
					
						
						
							
							- Added CTR_DRBG based on AES-256-CTR (NIST SP 800-90) random generator  
						
						
						
						
					 
					
						2011-11-27 14:46:59 +00:00