yuzu-emu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-11-26 01:05:40 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'origin/misc-1.3' into mbedtls-1.3

Browse Source
This commit is contained in:
Simon Butcher 2015-12-22 20:15:35 +00:00
commit caa8b4977c
2 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
ChangeLog
View File

@ -1,5 +1,10 @@
mbed TLS ChangeLog (Sorted per branch, date)
= mbed TLS 1.3.16 released 2015-12-xx
Bugfix
* Fix over-restricive length limit in GCM. Found by Andreas-N. #362
= mbed TLS 1.3.15 released 2015-11-04
Security

2
library/gcm.c
View File

@ -357,7 +357,7 @@ int gcm_update( gcm_context *ctx,
/* Total length is restricted to 2^39 - 256 bits, ie 2^36 - 2^5 bytes
* Also check for possible overflow */
if( ctx->len + length < ctx->len ||
(uint64_t) ctx->len + length > 0x03FFFFE0ull )
(uint64_t) ctx->len + length > 0xFFFFFFFE0ull )
{
return( POLARSSL_ERR_GCM_BAD_INPUT );
}