eden-emu/mbedtls
15
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge pull request #1071 from gilles-peskine-arm/ssl_decrypt_stream_short_buffer

Browse source 
Fix buffer overread in mbedtls_ssl_decrypt_buf with stream cipher
This commit is contained in:
Gilles Peskine 2023-09-22 11:43:03 +02:00 • committed by GitHub
commit 193f94276e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
8 changed files with 806 additions and 615 deletions
Download patch file Download diff file Expand all files Collapse all files

3
ChangeLog.d/ssl_decrypt_buf-short_record.txt Normal file
View file

@ -0,0 +1,3 @@
Security
* Fix a buffer overread when parsing short TLS application data records in
null-cipher cipher suites. Credit to OSS-Fuzz.