yuzu-emu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-11-27 03:14:17 +01:00
Code Issues Packages Projects Releases Wiki Activity
2f3fe70f7e
mbedtls/library
History
Andres AG 2f3fe70f7e Fix verify out flags from x509_crt_verify_top() 
This change fixes a regression introduced by an earlier commit that
modified x509_crt_verify_top() to ensure that valid certificates
that are after past or future valid in the chain are processed. However
the change introduced a change in behaviour that caused the
verification flags BADCERT_EXPIRED and BADCERT_FUTURE to always be set
whenever there is a failure in the verification regardless of the cause.

The fix maintains both behaviours:
  * Ensure that valid certificates after future and past are verified
  * Ensure that the correct verification flags are set.

To do so, a temporary pointer to the first future or past valid
certificate is maintained while traversing the chain. If a truly valid
certificate is found then that one is used, otherwise if no valid
certificate is found and the end of the chain is reached, the program
reverts back to using the future or past valid certificate.
2017-01-20 17:12:36 +00:00
..
.gitignore Minor gitginore fixes 2015-01-28 15:34:01 +00:00
aes.c Rename website and repository 2015-03-06 13:17:10 +00:00
aesni.c Rename website and repository 2015-03-06 13:17:10 +00:00
arc4.c Rename website and repository 2015-03-06 13:17:10 +00:00
asn1parse.c Fix 1 byte overread in mbedtls_asn1_get_int() 2016-10-13 12:54:32 +01:00
asn1write.c Merge memory leak fix into branch 'mbedtls-1.3' 2016-01-02 00:28:19 +00:00
base64.c Fix references to non-standard SIZE_T_MAX 2015-10-05 15:29:48 +01:00
bignum.c Fix backporting mistakes in previous 5 commits 2016-01-08 15:24:46 +01:00
blowfish.c Rename website and repository 2015-03-06 13:17:10 +00:00
camellia.c Rename website and repository 2015-03-06 13:17:10 +00:00
ccm.c Fix for MSVC Compiler warnings 2016-11-10 15:40:53 +00:00
certs.c Rename website and repository 2015-03-06 13:17:10 +00:00
cipher_wrap.c Rename website and repository 2015-03-06 13:17:10 +00:00
cipher.c Add POLARSSL_DEPRECATED_{WARNING,REMOVED} 2015-03-23 14:11:11 +01:00
CMakeLists.txt Update library version to 1.3.18 2016-10-17 23:40:14 +01:00
ctr_drbg.c Add missing 'const' on selftest data 2015-03-11 09:13:42 +00:00
debug.c Revert "Avoid formatting debug message uselessly" 2015-08-10 17:36:47 +02:00
des.c Rename website and repository 2015-03-06 13:17:10 +00:00
dhm.c accept PKCS#3 DH parameters with privateValueLength included 2015-04-15 13:27:13 +02:00
ecdh.c Rename website and repository 2015-03-06 13:17:10 +00:00
ecdsa.c Rename website and repository 2015-03-06 13:17:10 +00:00
ecp_curves.c Fix spurious #endif from previous cherry-pick 2015-10-05 14:57:01 +01:00
ecp.c Fix macroization of inline in C++ 2015-10-05 14:28:17 +01:00
entropy_poll.c Fix -Wshadow warnings 2015-08-31 11:07:51 +02:00
entropy.c Serious bug fix in entropy.c 2015-06-01 12:28:29 +02:00
error.c Typos and doc additions 2015-05-11 10:44:11 +01:00
gcm.c Fix documentation for mbedtls_gcm_finish() 2016-10-13 12:54:32 +01:00
havege.c Rename website and repository 2015-03-06 13:17:10 +00:00
hmac_drbg.c Fix use of deprecated function in the library 2015-03-20 18:23:52 +00:00
Makefile Make ar invocation more portable 2016-01-08 15:28:40 +01:00
md2.c Fix warning with MD/SHA ALT implementation 2015-08-31 11:22:47 +02:00
md4.c Fix warning with MD/SHA ALT implementation 2015-08-31 11:22:47 +02:00
md5.c Fix warning with MD/SHA ALT implementation 2015-08-31 11:22:47 +02:00
md_wrap.c Rename website and repository 2015-03-06 13:17:10 +00:00
md.c Add POLARSSL_DEPRECATED_{WARNING,REMOVED} 2015-03-23 14:11:11 +01:00
memory_buffer_alloc.c Rename website and repository 2015-03-06 13:17:10 +00:00
net.c Fix for net_usleep() timing selftest on mingw 2016-01-15 14:36:08 +00:00
oid.c Fix typo in an OID name 2015-10-27 15:12:39 +01:00
padlock.c Fix bug in Via Padlock support 2015-04-02 10:53:59 +01:00
pbkdf2.c Add POLARSSL_DEPRECATED_{WARNING,REMOVED} 2015-03-23 14:11:11 +01:00
pem.c Fix potential random malloc in pem_read() 2015-09-30 17:01:35 +02:00
pk_wrap.c Rename website and repository 2015-03-06 13:17:10 +00:00
pk.c Rename website and repository 2015-03-06 13:17:10 +00:00
pkcs5.c Add missing 'const' on selftest data 2015-03-11 09:13:42 +00:00
pkcs11.c Rename website and repository 2015-03-06 13:17:10 +00:00
pkcs12.c Fix stack buffer overflow in pkcs12 2015-09-30 16:46:07 +02:00
pkparse.c Fix bug in pk_parse_key() 2015-04-15 11:21:24 +02:00
pkwrite.c Fix other occurrences of same bounds check issue 2015-10-27 11:47:37 +01:00
platform.c Fix compile errors with NO_STD_FUNCTIONS 2015-06-03 10:20:33 +01:00
ripemd160.c Rename website and repository 2015-03-06 13:17:10 +00:00
rsa.c Merge branch for fix for #502 - Unchecked calls 2016-10-14 01:10:02 +01:00
sha1.c Fix warning with MD/SHA ALT implementation 2015-08-31 11:22:47 +02:00
sha256.c Fix warning with MD/SHA ALT implementation 2015-08-31 11:22:47 +02:00
sha512.c Fix warning with MD/SHA ALT implementation 2015-08-31 11:22:47 +02:00
ssl_cache.c Rename website and repository 2015-03-06 13:17:10 +00:00
ssl_ciphersuites.c Rename website and repository 2015-03-06 13:17:10 +00:00
ssl_cli.c Fix guards in SSL for ECDH key exchanges 2016-10-13 12:44:20 +01:00
ssl_srv.c Fix for MSVC Compiler warnings 2016-11-10 15:40:53 +00:00
ssl_tls.c Fix for MSVC Compiler warnings 2016-11-10 15:40:53 +00:00
threading.c Rename website and repository 2015-03-06 13:17:10 +00:00
timing.c Increase tolerance of timing selftest 2015-08-19 14:48:34 +02:00
version_features.c Update features list 2016-10-13 22:11:15 +01:00
version.c Rename website and repository 2015-03-06 13:17:10 +00:00
x509_create.c Fix other occurrences of same bounds check issue 2015-10-27 11:47:37 +01:00
x509_crl.c Fix undefined behaviour in x509 2015-04-30 11:21:18 +02:00
x509_crt.c Fix verify out flags from x509_crt_verify_top() 2017-01-20 17:12:36 +00:00
x509_csr.c Rename website and repository 2015-03-06 13:17:10 +00:00
x509.c Fix integration of bugfix for #626 2016-10-17 22:41:54 +01:00
x509write_crt.c Add missing bounds check in X509 DER write funcs 2016-10-13 12:45:07 +01:00
x509write_csr.c Add missing bounds check in X509 DER write funcs 2016-10-13 12:45:07 +01:00
xtea.c Rename website and repository 2015-03-06 13:17:10 +00:00