该项目从 https://github.com/Mbed-TLS/mbedtls 镜像。
拉取镜像更新于 。
- 6月 24, 2015
-
-
由 Manuel Pégourié-Gonnard 创作于
-
由 Manuel Pégourié-Gonnard 创作于
-
由 Manuel Pégourié-Gonnard 创作于
-
由 Manuel Pégourié-Gonnard 创作于
May happen with a faulty configuration (eg no allowed curve but trying to use ECDHE key exchange), but not trigger able remotely. (Found with Clang's scan-build.)
-
由 Manuel Pégourié-Gonnard 创作于
scan-build was reporting NULL dereferences
-
由 Manuel Pégourié-Gonnard 创作于
Probably a bad merge from the 1.3 branch
-
- 6月 23, 2015
-
-
由 Manuel Pégourié-Gonnard 创作于
-
由 Manuel Pégourié-Gonnard 创作于
- avoids dependency on snprintf - allows using "smtps" instead of "456" if desired
-
由 Manuel Pégourié-Gonnard 创作于
-
由 Manuel Pégourié-Gonnard 创作于
Caused issues in threading situations
-
由 Manuel Pégourié-Gonnard 创作于
-
由 Manuel Pégourié-Gonnard 创作于
-
由 Manuel Pégourié-Gonnard 创作于
When someone defines MBEDTLS_MD5_ALT for example, the init function may need to do more that just zeroizing the context
-
由 Manuel Pégourié-Gonnard 创作于
Allow for future support of decipherOnly and encipherOnly. Some work will be required to ensure we still write only one byte when only one is needed.
-
由 Manuel Pégourié-Gonnard 创作于
-
由 Manuel Pégourié-Gonnard 创作于
-
由 Manuel Pégourié-Gonnard 创作于
-
由 Manuel Pégourié-Gonnard 创作于
-
由 Manuel Pégourié-Gonnard 创作于
After all it looks like those won't become standard.
-
由 Manuel Pégourié-Gonnard 创作于
Some toolchains do not have inttypes.h, and we only need stdint.h which is a subset of it.
-
由 Manuel Pégourié-Gonnard 创作于
-
由 Manuel Pégourié-Gonnard 创作于
Introduced when moving from gmtime_r() to gmtime(). Found with fbinfer.
-
由 Manuel Pégourié-Gonnard 创作于
Hopefully makes it easier on static analyzers
-
由 Manuel Pégourié-Gonnard 创作于
Found with fbinfer.
-
由 Manuel Pégourié-Gonnard 创作于
Due to the recent change about entropy sources strength, it is no longer acceptable to just disable the platform source. So, instead "fix" it so that it is clear to MemSan that memory is initialized. I tried __attribute__((no_sanitize_memory)) and MemSan's blacklist file, but couldn't seem to get them to work.
-
由 Manuel Pégourié-Gonnard 创作于
* set_hs: Add tests for mbedtls_set_hs_ca_chain() Add tests for mbedtls_ssl_set_hs_authmode() Add support for SNI CA and authmode in ssl_server2 Add mbedtls_ssl_set_hs_authmode
-
- 6月 22, 2015
-
-
由 Manuel Pégourié-Gonnard 创作于
-
由 Manuel Pégourié-Gonnard 创作于
-
由 Manuel Pégourié-Gonnard 创作于
-
由 Manuel Pégourié-Gonnard 创作于
While at it, fix the following: - on server with RSA_PSK, we don't want to set flags (client auth happens via the PSK, no cert is expected). - use safer tests (eg == OPTIONAL vs != REQUIRED)
-
由 Manuel Pégourié-Gonnard 创作于
* snprintf: Rationalize other snprintf() uses Rationalize snprintf() usage in X.509 modules Add tests for snprintf Include fixed snprintf for Windows in platform.c
-
由 Manuel Pégourié-Gonnard 创作于
-
由 Manuel Pégourié-Gonnard 创作于
-
由 Manuel Pégourié-Gonnard 创作于
- Added in each tests program to be sure they are run (putting them in a test suite/function specific to the platform layer would cause them to be skipped when PLATFORM_C is not defined). - Platforms have already moved from a standard to a broken snprintf in the past [1], so make sure to catch that if it ever happens again. [1]: http://sourceforge.net/p/mingw-w64/mailman/message/31241434/
-
由 Manuel Pégourié-Gonnard 创作于
Use _WIN32 to detect it rather that _MSC_VER as it turns out MSYS2 uses the broken MS version by default too.
-
由 Manuel Pégourié-Gonnard 创作于
- no HAVE_TIME -> no HAVE_TIME_DATE - check if --help works, so that the test is cleanly skipped if license server cannot be reached
-
由 Manuel Pégourié-Gonnard 创作于
-
由 Manuel Pégourié-Gonnard 创作于
-
由 Manuel Pégourié-Gonnard 创作于
-
由 Manuel Pégourié-Gonnard 创作于
The main goal is, we want and error if cycle counter is the only source.
-