Hanno Becker 74dd3a70d8 Move dropping of unexpected AD records to after record decryption ... With the introduction of the CID extension, the record content type may change during decryption; we must therefore re-consider every record content type check that happens before decryption, and either move or duplicate it to ensure it also applies to records whose real content type is only revealed during decryption. This commit does this for the silent dropping of unexpected ApplicationData records in DTLS. Previously, this was caught in ssl_parse_record_header(), returning MBEDTLS_ERR_SSL_UNEXPECTED_RECORD which in ssl_get_next_record() would lead to silent skipping of the record. When using CID, this check wouldn't trigger e.g. when delayed encrypted ApplicationData records come on a CID-based connection during a renegotiation. This commit moves the check to mbedtls_ssl_handle_message_type() and returns MBEDTLS_ERR_SSL_NON_FATAL if it triggers, which leads so silent skipover in the caller mbedtls_ssl_read_record().		2019-05-20 15:32:36 +01:00
..
.gitignore
aes.c	Fix off-by-one in iv_off check and add tests	2018-12-18 12:22:40 +01:00
aesni.c
arc4.c
aria.c	Implement parameter validation for ARIA module	2018-12-19 12:51:00 +00:00
asn1parse.c
asn1write.c	Fix ASN1 bitstring writing	2019-02-11 21:13:33 +00:00
base64.c
bignum.c	Fix typo	2019-03-06 13:51:30 +00:00
blowfish.c	Implement parameter validation for Blowfish module	2018-12-19 12:52:59 +00:00
camellia.c	Minor improvements to Camellia module and documentation	2018-12-19 13:42:05 +00:00
ccm.c	Improve details of CCM parameter validation and documentation	2018-12-19 19:02:39 +01:00
certs.c	Use certificates from data_files and refer them	2019-02-12 17:10:29 +02:00
chacha20.c	Implement parameter validation for ChaCha/Poly modules	2018-12-18 15:30:30 +00:00
chachapoly.c	Fix wrong conditional in free() functions	2018-12-18 15:30:30 +00:00
cipher_wrap.c	Fix after PR comments	2018-07-23 18:18:32 +01:00
cipher.c	Remove unnecessary parameter validation from the Cipher module	2018-12-19 17:34:58 +01:00
cmac.c	Merge remote-tracking branch 'public/pr/1390' into development	2018-06-27 10:51:47 +01:00
CMakeLists.txt	Merge remote-tracking branch 'origin/pr/566' into baremetal	2019-05-09 16:59:02 +01:00
ctr_drbg.c	Streamline mbedtls_xxx_drbg_update_seed_file	2018-11-26 19:26:22 +01:00
debug.c	Merge remote-tracking branch 'origin/pr/1818' into mbedtls-2.16	2019-03-05 16:28:18 +00:00
des.c
dhm.c	Merge remote-tracking branch 'public/pr/1721' into development-restricted	2018-12-20 12:37:13 +00:00
ecdh.c	Fix mbedtls_ecdh_get_params with new ECDH context	2019-02-22 12:51:51 +01:00
ecdsa.c	Return error code of underlying function.	2019-01-10 10:52:08 +02:00
ecjpake.c	Minor fixes to ECJPAKE parameter validation	2018-12-19 09:48:50 +00:00
ecp_curves.c	Implement parameter validation for ECP module	2018-12-18 13:00:48 +00:00
ecp.c	Fix mbedtls_ecp_curve_info_from_name() for NULL input	2018-12-19 08:52:05 +00:00
entropy_poll.c	Add missing bracket	2018-11-06 13:12:47 +00:00
entropy.c
error.c	Merge remote-tracking branch 'public/pr/2271' into development	2018-12-20 12:15:08 +00:00
gcm.c	Improve parameter validation in mbedtls_gcm_free()	2018-12-19 17:32:19 +01:00
havege.c
hkdf.c	Fix issue if salt = NULL and salt_len !=0 in mbedtls_hkdf_extract()	2018-07-23 10:34:47 -07:00
hmac_drbg.c	Streamline mbedtls_xxx_drbg_update_seed_file	2018-11-26 19:26:22 +01:00
Makefile	Tinycrypt support for makefile builds	2019-04-25 11:00:41 +03:00
md2.c
md4.c
md5.c	Fix Lucky 13 cache attack on MD/SHA padding	2018-07-05 10:47:00 +02:00
md_wrap.c
md.c
memory_buffer_alloc.c	Fix braces in mbedtls_memory_buffer_alloc_status()	2018-06-12 16:56:04 +01:00
net_sockets.c	Merge remote-tracking branch 'public/pr/1198' into development	2018-07-24 17:20:17 +01:00
nist_kw.c	Remove faulty cipher_finish calls from nist_kw	2018-12-20 12:15:40 +01:00
oid.c
padlock.c
pem.c	Clear pk context and other minor changes in *_free() procedures	2018-06-12 18:25:09 +03:00
pk_wrap.c	Fix or improve some comments (and whitespace)	2018-10-15 15:27:49 +02:00
pk.c	Merge remote-tracking branch 'public/pr/1721' into development-restricted	2018-12-20 12:37:13 +00:00
pkcs5.c	Guard mbedtls_pkcs5_pbes2() by MBEDTLS_ASN1_PARSE_C	2018-10-16 13:39:40 +01:00
pkcs11.c
pkcs12.c	Make PBE-related parts of PKCS12 depend on MBEDTLS_ASN1_PARSE_C	2018-10-16 13:39:40 +01:00
pkparse.c	pk_parse*keyfile: explicitly validate path=NULL	2018-12-19 17:37:02 +01:00
pkwrite.c	PK parse/write: support keylen=0 correctly	2018-12-19 17:03:28 +01:00
platform_util.c	Remove the library provided function of MBEDTLS_PARAM_FAILED	2018-12-11 12:28:56 +01:00
platform.c	Omit runtime configuration of calloc/free if macro config enabled	2018-10-11 11:04:20 +01:00
poly1305.c	Fix wrong conditional in free() functions	2018-12-18 15:30:30 +00:00
ripemd160.c
rsa_internal.c	Bignum: Deprecate mbedtls_mpi_is_prime()	2018-10-09 16:36:53 +01:00
rsa.c	Merge remote-tracking branch 'public/pr/1721' into development-restricted	2018-12-20 12:37:13 +00:00
sha1.c	Move SHA1_VALIDATE[_RET] outside of MBEDTLS_SHA1_ALT guard	2018-12-20 10:18:05 +00:00
sha256.c	Move SHA256_VALIDATE[_RET] outside of MBEDTLS_SHA256_ALT guard	2018-12-20 10:24:29 +00:00
sha512.c	Move SHA512_VALIDATE[_RET] outside of MBEDTLS_SHA512_ALT guard	2018-12-20 10:24:00 +00:00
ssl_cache.c
ssl_ciphersuites.c	Reduce priority of 3DES ciphersuites	2019-03-01 10:29:13 +01:00
ssl_cli.c	Set pointer to start of plaintext at record decryption time	2019-05-20 15:32:36 +01:00
ssl_cookie.c
ssl_srv.c	Improve structure of ssl_parse_cid_ext()	2019-05-17 10:20:41 +01:00
ssl_ticket.c	Indentation fix	2018-10-25 16:07:16 +01:00
ssl_tls.c	Move dropping of unexpected AD records to after record decryption	2019-05-20 15:32:36 +01:00
threading.c	Don't declare and define gmtime()-mutex on Windows platforms	2018-09-06 12:09:56 +01:00
timing.c	Merge remote-tracking branch 'public/pr/1777' into development-proposed	2018-11-04 18:51:36 +00:00
version_features.c	Merge remote-tracking branch 'origin/pr/558' into baremetal	2019-05-09 17:03:18 +01:00
version.c
x509_create.c	Break overly long line in library/x509_create.c	2018-11-02 10:52:38 +00:00
x509_crl.c
x509_crt.c	Avoid MSVC compiler warning	2019-01-10 09:23:48 +00:00
x509_csr.c	Fix CSR parsing header call	2018-10-07 17:48:37 +01:00
x509.c	x509.c: Fix potential memory leak in X.509 self test	2019-03-11 15:19:05 +02:00
x509write_crt.c	Fix ASN1 bitstring writing	2019-02-11 21:13:33 +00:00
x509write_csr.c	Fix ASN1 bitstring writing	2019-02-11 21:13:33 +00:00
xtea.c