Gilles Peskine
00de2fd3dd
all.sh: fix cleanup happening during an out-of-tree build
2018-03-21 12:16:57 +01:00
Gilles Peskine
341ea25724
all.sh: be more conservative when cleaning up CMake artefacts
...
Only delete things that we expect to find, to avoid deleting other
things that people might have lying around in their build tree.
Explicitly skip .git to avoid e.g. accidentally matching a branch
name.
2018-03-21 12:15:06 +01:00
Gilles Peskine
cd0265ec85
Support out-of-tree testing with CMake
...
Create extra symbolic links with CMake so that SSL testing (ssl-opt.sh
and compat.sh) works in out-of-tree builds.
2018-03-21 12:12:47 +01:00
Gilles Peskine
37c88db612
all.sh: support armcc path options for compatibility with later Mbed TLS
...
Use $ARMC5_BIN_DIR or --armc5-bin-dir to set the location of
armcc (version 5), for compatibility with later versions of Mbed TLS.
Ignore --armc6-bin-dir for the same reason, since in 2.1 we only test
with a single version of armcc and we expect version 5. Keep
defaulting to armcc in the $PATH for backward compatibility with the
2.1 branch.
2018-03-21 12:01:20 +01:00
Gilles Peskine
32d9293dcf
all.sh: add --no-yotta for compatibility with later Mbed TLS
...
Allow scripts to run all.sh --no-yotta unconditionally. --no-yotta
just happens to be a no-op in 2.1 since 2.1's all.sh doesn't do
anything with Yotta.
2018-03-21 12:01:12 +01:00
Gilles Peskine
243bb4ce65
all.sh: add opposites to all boolean options
...
All options can now be overridden by a subsequent option, e.g.
"all.sh --foo --no-foo" is equivalent to "all.sh --no-foo". This
allows making wrapper scripts with default options and occasionally
overriding those options when running the wrapper script.
2018-03-21 10:11:12 +01:00
Gilles Peskine
7efa8cf456
all.sh: option parsing: reduce vertical spread
...
Only whitespace changes.
2018-03-21 10:04:49 +01:00
Gilles Peskine
823734b96c
Robustness fix in mbedtls_ssl_derive_keys
...
In mbedtls_ssl_derive_keys, don't call mbedtls_md_hmac_starts in
ciphersuites that don't use HMAC. This doesn't change the behavior of
the code, but avoids relying on an uncaught error when attempting to
start an HMAC operation that hadn't been initialized.
2018-03-19 19:06:08 +01:00
mohammad1603
89c12ecfb5
Avoid wraparound on in_left
...
Avoid wraparound on in_left
2018-03-19 07:15:50 -07:00
Jaeden Amero
1c986a9859
Update version to 2.1.11
2018-03-16 16:29:30 +00:00
Jaeden Amero
7f44963f45
Merge remote-tracking branch 'upstream-public/pr/1455' into mbedtls-2.1-restricted-proposed
2018-03-15 15:24:47 +00:00
Ron Eldor
329e4d572b
Addres review comments
...
Resolves comments raised in the review
2018-03-15 15:09:28 +00:00
Ron Eldor
f71ce5229e
Add log and fix stle issues
...
Address Andres comments of PR
2018-03-15 15:09:28 +00:00
Ron Eldor
82712a9c97
Write correct number of ciphersuites in log
...
Change location of log, to fit the correct number of used ciphersuites
2018-03-15 15:09:28 +00:00
Jaeden Amero
23f503f12d
Merge remote-tracking branch 'upstream-restricted/pr/465' into mbedtls-2.1-restricted-proposed
2018-03-14 18:32:21 +00:00
Jaeden Amero
5e50ff8f44
Merge remote-tracking branch 'upstream-restricted/pr/395' into mbedtls-2.1-restricted-proposed
2018-03-14 18:16:29 +00:00
Jaeden Amero
10a1a60966
Merge branch 'mbedtls-2.1-proposed' into mbedtls-2.1-restricted-proposed
2018-03-14 18:03:41 +00:00
Jaeden Amero
0980d9a3ae
Merge remote-tracking branch 'upstream-public/pr/1450' into mbedtls-2.1-proposed
2018-03-14 17:53:27 +00:00
Jaeden Amero
4e3629590f
Merge remote-tracking branch 'upstream-public/pr/1452' into mbedtls-2.1-proposed
2018-03-14 17:38:21 +00:00
Krzysztof Stachowiak
d3cec99377
Update change log
2018-03-14 14:39:01 +01:00
Krzysztof Stachowiak
c86b880411
Prevent arithmetic overflow on bounds check
2018-03-14 14:39:01 +01:00
Krzysztof Stachowiak
ce0d3ca128
Add bounds check before signature length read
2018-03-14 14:39:01 +01:00
Krzysztof Stachowiak
a7a8332402
Update change log
2018-03-14 14:35:12 +01:00
Krzysztof Stachowiak
0e0afacbc5
Prevent arithmetic overflow on bounds check
2018-03-14 14:35:12 +01:00
Krzysztof Stachowiak
7040553a02
Add bounds check before length read
2018-03-14 14:35:12 +01:00
Manuel Pégourié-Gonnard
a566dc4d45
fixup previous commit: add forgotten file
2018-03-14 14:10:43 +01:00
Manuel Pégourié-Gonnard
74b8ae89c6
x509: CRL: add tests for non-critical extension
...
The 'critical' boolean can be set to false in two ways:
- by leaving it implicit (test data generated by openssl)
- by explicitly setting it to false (generated by hand)
2018-03-14 12:48:04 +01:00
Manuel Pégourié-Gonnard
85f36ae0a1
x509: CRL: add tests for malformed extensions
...
This covers all lines added in the previous commit. Coverage was tested using:
make CFLAGS='--coverage -g3 -O0'
(cd tests && ./test_suite_x509parse)
make lcov
firefox Coverage/index.html # then visual check
Test data was generated by taking a copy of tests/data_files/crl-idp.pem,
encoding it as hex, and then manually changing the values of some bytes to
achieve the desired errors, using https://lapo.it/asn1js/ for help in locating
the desired bytes.
2018-03-14 12:48:03 +01:00
Manuel Pégourié-Gonnard
b0661769ab
x509: CRL: reject unsupported critical extensions
2018-03-14 09:28:24 +01:00
Gilles Peskine
df6f3dd9b0
Merge remote-tracking branch 'upstream-restricted/pr/430' into mbedtls-2.1-restricted-proposed
2018-03-13 17:28:42 +01:00
Gilles Peskine
8c1217984b
Merge remote-tracking branch 'upstream-restricted/pr/360' into mbedtls-2.1-restricted-proposed
...
Conflicts:
* scripts/config.pl: reconciled parallel edits in a comment.
2018-03-13 17:26:49 +01:00
Manuel Pégourié-Gonnard
503047f824
Fix 2.1-specific remaining MD/PK depend issues
...
For library/certs.c the issue is resolved by aligning it with the version in
the 2.7 branch (which is currently the same as the version in the development
branch)
2018-03-13 11:53:48 +01:00
Hanno Becker
41b6189ef7
Adapt ChangeLog
...
Add note about fix of memory leak in RSA self test.
2018-03-13 10:42:43 +00:00
Hanno Becker
b81fcd00e6
Correct memory leak in RSA self test
...
The RSA self test didn't free the RSA context on failure.
2018-03-13 10:31:02 +00:00
Gilles Peskine
5e533f43ee
Merge remote-tracking branch 'upstream-public/pr/1373' into mbedtls-2.1-proposed
2018-03-12 23:51:50 +01:00
Gilles Peskine
889de8eedb
Merge branch 'pr_1276' into mbedtls-2.1-proposed
2018-03-12 23:51:01 +01:00
Gilles Peskine
681f5aacfe
Align ChangeLog entry with 2.7
2018-03-12 23:50:18 +01:00
Gilles Peskine
8da4f864a5
Merge remote-tracking branch 'upstream-public/pr/1009' into mbedtls-2.1-proposed
2018-03-12 23:44:48 +01:00
Gilles Peskine
5913453168
Merge remote-tracking branch 'upstream-public/pr/1431' into mbedtls-2.1-proposed
2018-03-12 23:43:44 +01:00
Manuel Pégourié-Gonnard
62732b36fb
Fix remaining issues found by depend-hashes
2018-03-12 15:52:55 +01:00
Manuel Pégourié-Gonnard
8326fb2e1f
Fix remaining issues found by depend-pkalgs
2018-03-12 15:52:53 +01:00
Gilles Peskine
adee19582e
Merge branch 'pr_1409' into mbedtls-2.1-proposed
2018-03-11 00:52:36 +01:00
Gilles Peskine
857802afb3
Merge remote-tracking branch 'upstream-public/pr/1250' into mbedtls-2.1-proposed
2018-03-11 00:52:35 +01:00
Gilles Peskine
d38464698e
Merge remote-tracking branch 'upstream-public/pr/1295' into mbedtls-2.1-proposed
2018-03-11 00:52:35 +01:00
Gilles Peskine
0aacc9a96d
Merge remote-tracking branch 'upstream-public/pr/1297' into mbedtls-2.1-proposed
2018-03-11 00:52:35 +01:00
Gilles Peskine
9a00ef3cf1
Merge branch 'pr_953' into HEAD
2018-03-11 00:52:24 +01:00
Gilles Peskine
b1e6efd55d
This fixes #664
2018-03-11 00:51:02 +01:00
Gilles Peskine
15967a8501
Fix grammar in ChangeLog entry
2018-03-11 00:15:56 +01:00
Gilles Peskine
af18faca22
Merge remote-tracking branch 'upstream-public/pr/937' into mbedtls-2.1-proposed
2018-03-10 23:52:22 +01:00
Gilles Peskine
fa839bee39
Show build modes in code font
...
This clarifies that it's the string to type and not just some
description of it.
2018-03-09 14:24:36 +01:00
