blob: 83b7f2f88ba66d20d6ac855c0a7d121daf10f707 [file] [log] [blame]
Gilles Peskine6bba0a82024-06-26 23:32:50 +02001Security
2 * Fix a stack buffer overflow in mbedtls_ecdsa_der_to_raw() and
Gilles Peskinea9e7ac92024-06-27 10:59:55 +02003 mbedtls_ecdsa_raw_to_der() when the bits parameter is larger than the
4 largest supported curve. In some configurations with PSA disabled,
5 all values of bits are affected. This never happens in internal library
6 calls, but can affect applications that call these functions directly.