mbedtls/ChangeLog.d/conditionalize-mbedtls_mpi_sub_abs-memcpy.txt
Aaron M. Ucko af67d2c1cf mbedtls_mpi_sub_abs: Skip memcpy when redundant (#6701).
In some contexts, the output pointer may equal the first input
pointer, in which case copying is not only superfluous but results in
"Source and destination overlap in memcpy" errors from Valgrind (as I
observed in the context of ecp_double_jac) and a diagnostic message
from TrustInSoft Analyzer (as Pascal Cuoq reported in the context of
other ECP functions called by cert-app with a suitable certificate).

Signed-off-by: Aaron M. Ucko <ucko@ncbi.nlm.nih.gov>
2023-01-17 11:52:22 -05:00

5 lines
318 B
Text

Bugfix
* Fix mbedtls_mpi_sub_abs() to account for the possibility that the output
pointer could equal the first input pointer and if so to skip a memcpy()
call that would be redundant. Reported by Pascal Cuoq using TrustInSoft
Analyzer in #6701; observed independently by Aaron Ucko under Valgrind.