Manuel Pégourié-Gonnard f7022d1131 Fix bug in server parsing point formats extension ... There is only one length byte but for some reason we skipped two, resulting in reading one byte past the end of the extension. Fortunately, even if that extension is at the very end of the ClientHello, it can't be at the end of the buffer since the ClientHello length is at most SSL_MAX_CONTENT_LEN and the buffer has some more room after that for MAC and so on. So there is no buffer overread. Possible consequences are: - nothing, if the next byte is 0x00, which is a comment first byte for other extensions, which is why the bug remained unnoticed - using a point format that was not offered by the peer if next byte is 0x01. In that case the peer will reject our ServerKeyExchange message and the handshake will fail. - thinking that we don't have a common point format even if we do, which will cause us to immediately abort the handshake. None of these are a security issue. The same bug was fixed client-side in fd35af15		2015-09-16 11:32:18 +02:00
..
.gitignore	Split libs with make + general make cleanups	2015-06-25 10:59:56 +02:00
aes.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
aesni.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
arc4.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
asn1parse.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
asn1write.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
base64.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
bignum.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
blowfish.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
camellia.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ccm.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
certs.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
cipher_wrap.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
cipher.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
CMakeLists.txt	Bump version to 2.1.0	2015-09-04 14:33:31 +02:00
ctr_drbg.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
debug.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
des.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
dhm.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ecdh.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ecdsa.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ecp_curves.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ecp.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
entropy_poll.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
entropy.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
error.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
gcm.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
havege.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
hmac_drbg.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
Makefile	Fix error when loading libmbedtls.so	2015-08-10 10:17:32 +02:00
md2.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
md4.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
md5.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
md_wrap.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
md.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
memory_buffer_alloc.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
net.c	FIX: compiler warning with recvfrom on 64-bit	2015-09-09 08:49:48 -07:00
oid.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
padlock.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
pem.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
pk_wrap.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
pk.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
pkcs5.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
pkcs11.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
pkcs12.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
pkparse.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
pkwrite.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
platform.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ripemd160.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
rsa.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
sha1.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
sha256.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
sha512.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ssl_cache.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ssl_ciphersuites.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ssl_cli.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ssl_cookie.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ssl_srv.c	Fix bug in server parsing point formats extension	2015-09-16 11:32:18 +02:00
ssl_ticket.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ssl_tls.c	fix const-ness of argument to mbedtls_ssl_conf_cert_profile	2015-09-08 16:53:18 +01:00
threading.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
timing.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
version_features.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
version.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
x509_create.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
x509_crl.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
x509_crt.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
x509_csr.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
x509.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
x509write_crt.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
x509write_csr.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
xtea.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00