1
0
mirror of https://github.com/ARMmbed/mbedtls.git synced 2025-06-29 10:26:39 +08:00
Andrzej Kurek 3fd9297658 Guard from undefined behaviour in case of an INT_MAX max_pathlen
When parsing a certificate with the basic constraints extension
the max_pathlen that was read from it was incremented regardless
of its value. However, if the max_pathlen is equal to INT_MAX (which
is highly unlikely), an undefined behaviour would occur.
This commit adds a check to ensure that such value is not accepted
as valid. Relevant tests for INT_MAX and INT_MAX-1 are also introduced.
Certificates added in this commit were generated using the
test_suite_x509write, function test_x509_crt_check. Input data taken
from the "Certificate write check Server1 SHA1" test case, so the generated
files are like the "server1.crt", but with the "is_ca" field set to 1 and
max_pathlen as described by the file name.

Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-04-17 11:30:21 +02:00
..
2013-11-28 18:07:39 +01:00
2013-11-28 18:07:39 +01:00
2013-11-28 18:07:39 +01:00
2017-06-06 18:44:14 +02:00
2019-06-03 16:22:01 +01:00
2019-06-03 16:22:01 +01:00
2017-06-06 18:44:13 +02:00
2017-06-06 18:44:13 +02:00
2014-03-13 19:25:06 +01:00
2019-07-10 16:58:56 +03:00
2015-06-17 14:27:38 +02:00
2014-04-04 16:42:44 +02:00
2013-10-10 15:11:33 +02:00
2013-10-10 15:11:33 +02:00
2013-10-10 15:11:33 +02:00
2013-10-10 15:11:33 +02:00
2013-10-10 15:11:33 +02:00
2013-10-10 15:11:33 +02:00
2013-07-08 17:32:26 +02:00
2013-07-08 17:32:26 +02:00
2020-02-03 15:55:43 +01:00
2014-03-14 08:41:02 +01:00
2017-06-06 18:44:14 +02:00
2013-08-20 20:46:03 +02:00
2014-03-13 19:25:06 +01:00
2014-06-02 16:10:29 +02:00
2014-06-02 16:10:29 +02:00
2014-06-02 16:10:29 +02:00
2014-06-02 16:10:29 +02:00
2014-06-02 16:10:29 +02:00
2015-09-01 17:24:42 +02:00
2015-09-01 17:24:42 +02:00
2015-09-01 17:24:42 +02:00