mirror of
https://github.com/yuzu-mirror/mbedtls.git
synced 2026-01-06 08:40:14 +01:00
16 lines
841 B
Plaintext
16 lines
841 B
Plaintext
Bugfix
|
|
* Fix potential buffer overflow in DTLS with MBEDTLS_SSL_DTLS_CONNECTION_ID
|
|
enabled leading to context corruption.
|
|
|
|
Security
|
|
* Fix potential memory probe through non-constant time memcmp() in DTLS
|
|
with MBEDTLS_SSL_DTLS_CONNECTION_ID enabled. The memory probe is possible
|
|
only under very specific and unlikely conditions:
|
|
2 * MBEDTLS_SSL_CID_OUT_LEN_MAX < MBEDTLS_SSL_CID_IN_LEN_MAX if
|
|
MBEDTLS_SSL_CONTEXT_SERIALIZATION is disabled,
|
|
MBEDTLS_SERVER_HELLO_RANDOM_LEN + MBEDTLS_CLIENT_HELLO_RANDOM_LEN +
|
|
2 * MBEDTLS_SSL_CID_OUT_LEN_MAX < MBEDTLS_SSL_CID_IN_LEN_MAX if
|
|
MBEDTLS_SSL_CONTEXT_SERIALIZATION is enabled. Those conditions are not
|
|
met with the default values of MBEDTLS_SSL_CID_IN_LEN_MAX and
|
|
MBEDTLS_SSL_CID_OUT_LEN_MAX where the two maximum lengths are equal.
|