forked from pool/mbedtls-2
a367b0a925
Security
* Unlike previously documented, enabling MBEDTLS_PSA_HMAC_DRBG_MD_TYPE does
not cause the PSA subsystem to use HMAC_DRBG: it uses HMAC_DRBG only when
MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG and MBEDTLS_CTR_DRBG_C are disabled.
CVE-2024-45157
Bugfix
* Fix the build in some configurations when check_config.h is not included.
Fix gh#Mbed-TLS/mbedtls#9152.
* Fix issue of redefinition warning messages for _GNU_SOURCE in
entropy_poll.c and sha_256.c. There was a build warning during building for
linux platform. Resolves gh#Mbed-TLS/mbedtls#9026
* Fix error handling when creating a key in a dynamic secure element
(feature enabled by MBEDTLS_PSA_CRYPTO_SE_C). In a low memory condition,
the creation could return PSA_SUCCESS but using or destroying the key would
not work. Fixes gh#Mbed-TLS/mbedtls#8537.
* Fix a memory leak that could occur when failing to process an RSA
key through some PSA functions due to low memory conditions. Document and
enforce the limitation of mbedtls_psa_register_se_key()
to persistent keys. Resolves gh#Mbed-TLS/mbedtls#9253.
- Add fix_calloc-transposed-args.patch
OBS-URL: https://build.opensuse.org/package/show/security:tls/mbedtls-2?expand=0&rev=16
60 lines
3.1 KiB
Diff
60 lines
3.1 KiB
Diff
From 990a88cd53d40ff42481a2c200b05f656507f326 Mon Sep 17 00:00:00 2001
|
|
From: Sergei Trofimovich <slyich@gmail.com>
|
|
Date: Thu, 25 Jan 2024 20:48:56 +0000
|
|
Subject: [PATCH] tests: fix `calloc()` argument list (`gcc-14` fix)
|
|
|
|
`gcc-14` added a new `-Wcalloc-transposed-args` warning recently. It
|
|
detected minor infelicity in `calloc()` API usage in `mbedtls`:
|
|
|
|
In file included from /build/mbedtls/tests/include/test/ssl_helpers.h:19,
|
|
from /build/mbedtls/tests/src/test_helpers/ssl_helpers.c:11:
|
|
/build/mbedtls/tests/src/test_helpers/ssl_helpers.c: In function 'mbedtls_test_init_handshake_options':
|
|
/build/mbedtls/tests/include/test/macros.h:128:46:
|
|
error: 'calloc' sizes specified with 'sizeof' in the earlier argument
|
|
and not in the later argument [-Werror=calloc-transposed-args]
|
|
128 | (pointer) = mbedtls_calloc(sizeof(*(pointer)), \
|
|
| ^
|
|
|
|
Signed-off-by: Sergei Trofimovich <slyich@gmail.com>
|
|
---
|
|
tests/include/test/macros.h | 12 ++++++------
|
|
1 file changed, 6 insertions(+), 6 deletions(-)
|
|
|
|
diff --git a/tests/include/test/macros.h b/tests/include/test/macros.h
|
|
index 894fc6727cc8..3c347e17e901 100644
|
|
--- a/tests/include/test/macros.h
|
|
+++ b/tests/include/test/macros.h
|
|
@@ -135,8 +135,8 @@
|
|
do { \
|
|
TEST_ASSERT((pointer) == NULL); \
|
|
if ((item_count) != 0) { \
|
|
- (pointer) = mbedtls_calloc(sizeof(*(pointer)), \
|
|
- (item_count)); \
|
|
+ (pointer) = mbedtls_calloc((item_count), \
|
|
+ sizeof(*(pointer))); \
|
|
TEST_ASSERT((pointer) != NULL); \
|
|
} \
|
|
} while (0)
|
|
@@ -165,8 +165,8 @@
|
|
#define TEST_CALLOC_NONNULL(pointer, item_count) \
|
|
do { \
|
|
TEST_ASSERT((pointer) == NULL); \
|
|
- (pointer) = mbedtls_calloc(sizeof(*(pointer)), \
|
|
- (item_count)); \
|
|
+ (pointer) = mbedtls_calloc((item_count), \
|
|
+ sizeof(*(pointer))); \
|
|
if (((pointer) == NULL) && ((item_count) == 0)) { \
|
|
(pointer) = mbedtls_calloc(1, 1); \
|
|
} \
|
|
@@ -185,8 +185,8 @@
|
|
do { \
|
|
TEST_ASSERT((pointer) == NULL); \
|
|
if ((item_count) != 0) { \
|
|
- (pointer) = mbedtls_calloc(sizeof(*(pointer)), \
|
|
- (item_count)); \
|
|
+ (pointer) = mbedtls_calloc((item_count), \
|
|
+ sizeof(*(pointer))); \
|
|
TEST_ASSUME((pointer) != NULL); \
|
|
} \
|
|
} while (0)
|