Andres Amaya Garcia 3d98b97442 Modify zeroize internal buffers in md modules ...

Modify all the following functions to zeroize an internal buffer before
exiting the function. The buffer could potentially contain confidential
data read from a file.

* md2_file()
* md4_file()
* md5_file()
* ripemd160_file()
* sha1_file()
* sha256_file()
* sha512_file()

2017-09-20 11:47:49 +01:00

..

.gitignore

Minor gitginore fixes

2015-01-28 15:34:01 +00:00

aes.c

Rename website and repository

2015-03-06 13:17:10 +00:00

aesni.c

Rename website and repository

2015-03-06 13:17:10 +00:00

arc4.c

Rename website and repository

2015-03-06 13:17:10 +00:00

asn1parse.c

Fix 1 byte overread in mbedtls_asn1_get_int()

2016-10-13 12:54:32 +01:00

asn1write.c

Merge memory leak fix into branch 'mbedtls-1.3'

2016-01-02 00:28:19 +00:00

base64.c

Add comment to integer overflow fix in base64.c

2017-02-25 21:27:17 +00:00

bignum.c

Zeroize tmp buf in mbedtls_mpi_fill_random()

2017-07-12 10:44:50 +01:00

blowfish.c

Rename website and repository

2015-03-06 13:17:10 +00:00

camellia.c

Rename website and repository

2015-03-06 13:17:10 +00:00

ccm.c

Fix for MSVC Compiler warnings

2016-11-10 15:40:53 +00:00

certs.c

Rename website and repository

2015-03-06 13:17:10 +00:00

cipher_wrap.c

Rename website and repository

2015-03-06 13:17:10 +00:00

cipher.c

Fix integer overflows in buffer bound checks

2017-02-25 21:25:44 +00:00

CMakeLists.txt

Update the version number to 1.3.20

2017-06-20 23:46:46 +01:00

ctr_drbg.c

Zeroize tmp buf in ctr_drbg_write_seed_file()

2017-07-12 11:04:28 +01:00

debug.c

Revert "Avoid formatting debug message uselessly"

2015-08-10 17:36:47 +02:00

des.c

Rename website and repository

2015-03-06 13:17:10 +00:00

dhm.c

Zeroize tmp buf on fail in load_file() dhm.c

2017-07-12 10:21:30 +01:00

ecdh.c

Rename website and repository

2015-03-06 13:17:10 +00:00

ecdsa.c

Rename website and repository

2015-03-06 13:17:10 +00:00

ecp_curves.c

ECP: Prevent freeing a buffer on stack

2017-02-28 20:24:52 +00:00

ecp.c

Fix macroization of inline in C++

2015-10-05 14:28:17 +01:00

entropy_poll.c

Fix -Wshadow warnings

2015-08-31 11:07:51 +02:00

entropy.c

Zeroize tmp buffer in entropy_update()

2017-07-12 11:04:28 +01:00

error.c

Typos and doc additions

2015-05-11 10:44:11 +01:00

gcm.c

Fix documentation for mbedtls_gcm_finish()

2016-10-13 12:54:32 +01:00

havege.c

Rename website and repository

2015-03-06 13:17:10 +00:00

hmac_drbg.c

Zeroize tmp bufs in hmac_drbg.c functions

2017-07-12 10:36:30 +01:00

Makefile

Make ar invocation more portable

2016-01-08 15:28:40 +01:00

md2.c

Modify zeroize internal buffers in md modules

2017-09-20 11:47:49 +01:00

md4.c

Modify zeroize internal buffers in md modules

2017-09-20 11:47:49 +01:00

md5.c

Modify zeroize internal buffers in md modules

2017-09-20 11:47:49 +01:00

md_wrap.c

Rename website and repository

2015-03-06 13:17:10 +00:00

md.c

Add POLARSSL_DEPRECATED_{WARNING,REMOVED}

2015-03-23 14:11:11 +01:00

memory_buffer_alloc.c

Rename website and repository

2015-03-06 13:17:10 +00:00

net.c

Fix for net_usleep() timing selftest on mingw

2016-01-15 14:36:08 +00:00

oid.c

Fix typo in an OID name

2015-10-27 15:12:39 +01:00

padlock.c

Fix bug in Via Padlock support

2015-04-02 10:53:59 +01:00

pbkdf2.c

Add POLARSSL_DEPRECATED_{WARNING,REMOVED}

2015-03-23 14:11:11 +01:00

pem.c

Zeroize buf if mbedtls_base64_decode() fails

2017-07-12 11:04:28 +01:00

pk_wrap.c

Fix data loss in unsigned int cast in PK

2017-02-15 10:44:02 +00:00

pk.c

Fix data loss in unsigned int cast in PK

2017-02-15 10:44:02 +00:00

pkcs5.c

Add missing 'const' on selftest data

2015-03-11 09:13:42 +00:00

pkcs11.c

Rename website and repository

2015-03-06 13:17:10 +00:00

pkcs12.c

Fix stack buffer overflow in pkcs12

2015-09-30 16:46:07 +02:00

pkparse.c

Zeroize return buf on failure in pkparse.c

2017-07-12 10:38:12 +01:00

pkwrite.c

Fix other occurrences of same bounds check issue

2015-10-27 11:47:37 +01:00

platform.c

Fix compile errors with NO_STD_FUNCTIONS

2015-06-03 10:20:33 +01:00

ripemd160.c

Modify zeroize internal buffers in md modules

2017-09-20 11:47:49 +01:00

rsa.c

Merge remote-tracking branch 'restricted/iotssl-1138-rsa-padding-check-1.3-restricted' into mbedtls-1.3-restricted

2017-06-08 20:34:40 +02:00

sha1.c

Modify zeroize internal buffers in md modules

2017-09-20 11:47:49 +01:00

sha256.c

Modify zeroize internal buffers in md modules

2017-09-20 11:47:49 +01:00

sha512.c

Modify zeroize internal buffers in md modules

2017-09-20 11:47:49 +01:00

ssl_cache.c

Rename website and repository

2015-03-06 13:17:10 +00:00

ssl_ciphersuites.c

Remember suitable hash function for any signature algorithm.

2017-05-24 10:47:54 +01:00

ssl_cli.c

Fix mbedtls_ssl_read

2017-06-08 15:59:38 +01:00

ssl_srv.c

Don't parse or write extensions in SSLv3

2017-06-09 15:30:29 +01:00

ssl_tls.c

Zeroize buffers in various modules

2017-07-12 10:51:22 +01:00

threading.c

Rename website and repository

2015-03-06 13:17:10 +00:00

timing.c

Increase tolerance of timing selftest

2015-08-19 14:48:34 +02:00

version_features.c

Update features list

2016-10-13 22:11:15 +01:00

version.c

Rename website and repository

2015-03-06 13:17:10 +00:00

x509_create.c

Fix other occurrences of same bounds check issue

2015-10-27 11:47:37 +01:00

x509_crl.c

Fix memory leak in x509_crl_parse()

2017-02-28 17:36:06 +00:00

x509_crt.c

Merge remote-tracking branch 'restricted/1205' into mbedtls-1.3-restricted

2017-06-09 14:49:04 +02:00

x509_csr.c

Fix unused variable/function compilation warnings

2016-12-07 16:11:17 +00:00

x509.c

Fix integration of bugfix for #626

2016-10-17 22:41:54 +01:00

x509write_crt.c

Add missing bounds check in X509 DER write funcs

2016-10-13 12:45:07 +01:00

x509write_csr.c

Add missing bounds check in X509 DER write funcs

2016-10-13 12:45:07 +01:00

xtea.c

Rename website and repository

2015-03-06 13:17:10 +00:00