ARMmbed/mbedtls
1
0
Fork 0
mirror of https://github.com/ARMmbed/mbedtls.git synced 2025-10-18 00:12:48 +08:00
Code Issues Releases Wiki Activity

Add ChangeLog entry for buffer overflow fix

Browse Source 
Signed-off-by: David Horstmann <david.horstmann@arm.com>
This commit is contained in:
David Horstmann
2024-10-11 17:17:21 +01:00
parent 3188178095
commit 1a0fe5b5c5
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
ChangeLog.d/fix-pkwrite-buffer-overrun.txt Normal file
View File

@@ -0,0 +1,10 @@
Security
* Fix a buffer overflow in mbedtls_pk_write_pubkey(),
mbedtls_pk_write_pubkey_der(), mbedtls_pk_write_pubkey_pem(),
mbedtls_pk_write_key_der() and mbedtls_pk_write_key_pem().
With MBEDTLS_USE_PSA_CRYPTO turned on, these functions would
write to a location before the start of the output buffer if it was less
than the size of the key being written and also less than
PK_MAX_EC_PUBLIC_KEY_SIZE (for EC public keys) and
PSA_EXPORT_KEY_PAIR_MAX_SIZE (for RSA private keys).
This buffer overflow only occurs for keys with the type MBEDTLS_PK_OPAQUE.