blob: 716b11e932ff4b562d9b82a5400253614ac7c3bd [file] [log] [blame]
Security
* Fix a buffer overflow in mbedtls_pk_write_pubkey(),
mbedtls_pk_write_pubkey_der() and mbedtls_pk_write_key_der().
With MBEDTLS_USE_PSA_CRYPTO turned on, these functions would
write to a location before the start of the output buffer if it was less
than the size of the key being written and also less than
PK_MAX_EC_PUBLIC_KEY_SIZE (for EC public keys) and
PSA_EXPORT_KEY_PAIR_MAX_SIZE (for RSA private keys).
This buffer overflow only occurs for keys with the type MBEDTLS_PK_OPAQUE.