mbedtls/ChangeLog.d/ssl_decrypt_buf-short_record.txt

Security
   * Fix a buffer overread when parsing short TLS application data records in
     null-cipher cipher suites. Credit to OSS-Fuzz.
mbedtls_ssl_decrypt_buf(): fix buffer overread with stream cipher With stream ciphers, add a check that there's enough room to read a MAC in the record. Without this check, subtracting the MAC length from the data length resulted in an integer underflow, causing the MAC calculation to try reading (SIZE_MAX + 1 - maclen) bytes of input, which is a buffer overread. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com> 2023-09-18 14:08:11 +02:00			`Security`
			`* Fix a buffer overread when parsing short TLS application data records in`
			`null-cipher cipher suites. Credit to OSS-Fuzz.`