tree 2fc69171d84a397bb3071e2f8eabaf018cd4bd06
parent d5ba4672b2e2c43228474548ada4c635de8320a2
parent 58fb49531da29b5a744a0999c4b14eb6d00e0fc8
author Simon Butcher <simon.butcher@arm.com> 1443998585 +0100
committer Simon Butcher <simon.butcher@arm.com> 1443998585 +0100

Merge fix IOTSSL-475 Potential buffer overflow

Two possible integer overflows (during << 2 or addition in BITS_TO_LIMB())
could result in far too few memory to be allocated, then overflowing the
buffer in the subsequent for loop.

Both integer overflows happen when slen is close to or greater than
SIZE_T_MAX >> 2 (ie 2^30 on a 32 bit system).

Note: one could also avoid those overflows by changing BITS_TO_LIMB(s << 2) to
CHARS_TO_LIMB(s >> 1) but the solution implemented looks more robust with
respect to future code changes.