mbedtls/net_poll-fd_setsize.txt at b94ea51ad022e0985f59b60cafa1017797996f9d - mbedtls - Gitea: Git with a cup of boomerjuice

yuzu-emu/mbedtls

mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-11-27 13:14:18 +01:00

Gilles Peskine ddf4374879 Fix stack buffer overflow in net functions with large file descriptor

Fix a stack buffer overflow with mbedtls_net_poll() and
mbedtls_net_recv_timeout() when given a file descriptor that is beyond
FD_SETSIZE. The bug was due to not checking that the file descriptor
is within the range of an fd_set object.

Fix #4169

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

2021-02-25 15:56:48 +01:00

5 lines

192 B

Plaintext

Raw Blame History

 Security
    * Fix a stack buffer overflow with mbedtls_net_poll() and
      mbedtls_net_recv_timeout() when given a file descriptor that is
      beyond FD_SETSIZE. Reported by FigBug in #4169.