mbedtls/ChangeLog.d/conditionalize-mbedtls_mpi_sub_abs-memcpy.txt

Bugfix
   * Fix potential undefined behavior in mbedtls_mpi_sub_abs().  Reported by
     Pascal Cuoq using TrustInSoft Analyzer in #6701; observed independently by
     Aaron Ucko under Valgrind.
mbedtls_mpi_sub_abs: Skip memcpy when redundant (#6701). In some contexts, the output pointer may equal the first input pointer, in which case copying is not only superfluous but results in "Source and destination overlap in memcpy" errors from Valgrind (as I observed in the context of ecp_double_jac) and a diagnostic message from TrustInSoft Analyzer (as Pascal Cuoq reported in the context of other ECP functions called by cert-app with a suitable certificate). Signed-off-by: Aaron M. Ucko <ucko@ncbi.nlm.nih.gov> 2023-01-17 17:52:22 +01:00			`Bugfix`
Simplify ChangeLog entry for mbedtls_mpi_sub_abs fix. Signed-off-by: Aaron M. Ucko <ucko@ncbi.nlm.nih.gov> 2023-01-17 21:12:25 +01:00			`* Fix potential undefined behavior in mbedtls_mpi_sub_abs(). Reported by`
			`Pascal Cuoq using TrustInSoft Analyzer in #6701; observed independently by`
			`Aaron Ucko under Valgrind.`