Gilles Peskine f604240b1b Fix stack buffer overflow in net functions with large file descriptor ...

Fix a stack buffer overflow with mbedtls_net_poll() and
mbedtls_net_recv_timeout() when given a file descriptor that is beyond
FD_SETSIZE. The bug was due to not checking that the file descriptor
is within the range of an fd_set object.

Fix #4169

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

2021-03-01 16:37:45 +01:00

..

00README.md

When to write a changelog: minor improvements

2020-10-01 00:34:22 +02:00

drbg-mutex.txt

Changelog entry for DRBG mutex usage fix

2021-02-22 19:40:41 +01:00

issue4093.txt

adding changelog entry for issue #4093

2021-02-02 12:57:48 +01:00

mpi_sub_abs.txt

mbedtls_mpi_sub_abs: fix buffer overflow in error case

2021-02-01 17:27:06 +01:00

net_poll-fd_setsize.txt

Fix stack buffer overflow in net functions with large file descriptor

2021-03-01 16:37:45 +01:00

rsa_private-ret.txt

Fix an incorrect error code if RSA private operation glitched

2021-01-06 20:55:34 +01:00

rsa-mutex.txt

Make entropy double-free work

2021-02-23 11:29:25 +01:00