mbedtls/net_poll-fd_setsize.txt at 22092e483ec55166c8564be0cabd78af1af60901 - mbedtls - Gitea: Git with a cup of boomerjuice

yuzu-emu/mbedtls

mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-11-26 08:15:44 +01:00

Gilles Peskine f604240b1b Fix stack buffer overflow in net functions with large file descriptor

Fix a stack buffer overflow with mbedtls_net_poll() and
mbedtls_net_recv_timeout() when given a file descriptor that is beyond
FD_SETSIZE. The bug was due to not checking that the file descriptor
is within the range of an fd_set object.

Fix #4169

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

2021-03-01 16:37:45 +01:00

5 lines

192 B

Plaintext

Raw Blame History

 Security
    * Fix a stack buffer overflow with mbedtls_net_poll() and
      mbedtls_net_recv_timeout() when given a file descriptor that is
      beyond FD_SETSIZE. Reported by FigBug in #4169.