)]}' { "log": [ { "commit": "2a1d9332d55d1270084232e42df08fdb08129f1b", "tree": "f14018384192bcdf3096e0f246a7b536b2a3f379", "parents": [ "84751ec1d449da294248f61a0b75abaa18f15c58", "dab3fd64abbfe73abc8d51f52b822748e2e6d341" ], "author": { "name": "Janos Follath", "email": "janos.follath@arm.com", "time": "Thu Apr 09 14:12:23 2020 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 09 14:12:23 2020 +0100" }, "message": "Merge pull request #682 from ARMmbed/prepare-rc-2.16.6-updated\n\nPrepare rc 2.16.6 updated" }, { "commit": "dab3fd64abbfe73abc8d51f52b822748e2e6d341", "tree": "f14018384192bcdf3096e0f246a7b536b2a3f379", "parents": [ "85ce08d0ca13ee021966bb89eada10e481fad9b0", "ef98d49997bf09f668e2b50cf689535039a48614" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Thu Apr 09 12:27:20 2020 +0200" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Thu Apr 09 12:27:20 2020 +0200" }, "message": "Merge branch \u0027mbedtls-2.16-restricted\u0027 into prepare-rc-2.16.6-updated\n\n* mbedtls-2.16-restricted:\n Parse HelloVerifyRequest buffer overread: add changelog entry\n Parse HelloVerifyRequest: avoid buffer overread at the start\n Parse HelloVerifyRequest: avoid buffer overread on the cookie\n" }, { "commit": "ef98d49997bf09f668e2b50cf689535039a48614", "tree": "4bc5f652e23a2006893f500fd8c2afab34e28566", "parents": [ "3a1b209f9edaa0b3331b92d8d94b5c60a2ccae5a", "afbcf97c2051f7f77db58463df4734cc1dd9a866" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Thu Apr 09 11:56:09 2020 +0200" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Thu Apr 09 11:56:09 2020 +0200" }, "message": "Merge remote-tracking branch \u0027restricted/pr/670\u0027 into mbedtls-2.16-restricted\n\n* restricted/pr/670:\n Parse HelloVerifyRequest buffer overread: add changelog entry\n Parse HelloVerifyRequest: avoid buffer overread at the start\n Parse HelloVerifyRequest: avoid buffer overread on the cookie\n" }, { "commit": "85ce08d0ca13ee021966bb89eada10e481fad9b0", "tree": "a7a1394050849bacf5e601ae5d77f5946ca23a45", "parents": [ "c04703c58c094fc420b5c857c591451eff524fb8" ], "author": { "name": "Janos Follath", "email": "janos.follath@arm.com", "time": "Thu Apr 09 09:35:43 2020 +0100" }, "committer": { "name": "Janos Follath", "email": "janos.follath@arm.com", "time": "Thu Apr 09 09:37:12 2020 +0100" }, "message": "Add missing ChangeLog entry\n\nSigned-off-by: Janos Follath \u003cjanos.follath@arm.com\u003e\n" }, { "commit": "c04703c58c094fc420b5c857c591451eff524fb8", "tree": "791852e9ab5ec7b403a08eca0b05e80bd8d5c7c2", "parents": [ "816305b8f5581cfdd87dd92dbbad1d8d6dc14e63" ], "author": { "name": "Janos Follath", "email": "janos.follath@arm.com", "time": "Wed Apr 08 17:17:27 2020 +0100" }, "committer": { "name": "Janos Follath", "email": "janos.follath@arm.com", "time": "Wed Apr 08 17:17:27 2020 +0100" }, "message": "Bump version to Mbed TLS 2.16.6\n\nSigned-off-by: Janos Follath \u003cjanos.follath@arm.com\u003e\n" }, { "commit": "816305b8f5581cfdd87dd92dbbad1d8d6dc14e63", "tree": "43ecb0b2eda5c17c66e3d6c083750c9f5a763744", "parents": [ "84751ec1d449da294248f61a0b75abaa18f15c58", "3a1b209f9edaa0b3331b92d8d94b5c60a2ccae5a" ], "author": { "name": "Janos Follath", "email": "janos.follath@arm.com", "time": "Wed Apr 08 15:09:26 2020 +0100" }, "committer": { "name": "Janos Follath", "email": "janos.follath@arm.com", "time": "Wed Apr 08 15:12:15 2020 +0100" }, "message": "Merge branch \u0027mbedtls-2.16-restricted\u0027 into mbedtls-2.16.6r0\n\nSigned-off-by: Janos Follath \u003cjanos.follath@arm.com\u003e\n" }, { "commit": "84751ec1d449da294248f61a0b75abaa18f15c58", "tree": "f68d7517b6c2745f8f0469278b3a9e3ad6d7c50d", "parents": [ "5e656196695d5a227d72d25b93656761ddd02edc", "6c2908ea5f0e58798a050b75b6f0eaa847120550" ], "author": { "name": "Gilles Peskine", "email": "gilles.peskine@arm.com", "time": "Mon Apr 06 17:48:48 2020 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Apr 06 17:48:48 2020 +0200" }, "message": "Merge pull request #3157 from mpg/improve-make-tags-2.16\n\n[backport 2.16] Improve ctags invocation in Makefile" }, { "commit": "3a1b209f9edaa0b3331b92d8d94b5c60a2ccae5a", "tree": "175581413cdd8ce40075740221881f2dde2c84fb", "parents": [ "bfa0f7d54077dd278c7952e2d002b5206262c686", "f60041688c8af902c59930afd25952f1003bcdcb" ], "author": { "name": "Janos Follath", "email": "janos.follath@arm.com", "time": "Mon Apr 06 15:23:38 2020 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Apr 06 15:23:38 2020 +0100" }, "message": "Merge pull request #676 from ARMmbed/ecc-projective-2.16-restricted\n\n[backport 2.16] Fix leakage of projective coordinates in ECC" }, { "commit": "5e656196695d5a227d72d25b93656761ddd02edc", "tree": "1e6fdfe972109e2f933d3be08665333eea9ded60", "parents": [ "901e87e5d1484bed62ad546ba0af5bd8fc1562e5", "b08a3344a5e41d9bd87fdad634cd0d5e19cce433" ], "author": { "name": "Gilles Peskine", "email": "gilles.peskine@arm.com", "time": "Thu Apr 02 19:21:16 2020 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 02 19:21:16 2020 +0200" }, "message": "Merge pull request #3142 from mpg/fix-reconnect-2.16\n\n[Backport 2.16] Improve testing of DTLS client hard reconnect" }, { "commit": "6c2908ea5f0e58798a050b75b6f0eaa847120550", "tree": "60c8d213c9039d56ad6a7f68bb1093bac95bbb6c", "parents": [ "a151d5b8d1378a52a6023fa27b3f5d2e3d224a81" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Thu Apr 02 12:10:45 2020 +0200" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Thu Apr 02 12:52:01 2020 +0200" }, "message": "Allow alternative ctags versions in Makefile\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n" }, { "commit": "a151d5b8d1378a52a6023fa27b3f5d2e3d224a81", "tree": "81a7486422a35f8e82a8e63a82dc115e12ab3306", "parents": [ "901e87e5d1484bed62ad546ba0af5bd8fc1562e5" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Thu Apr 02 11:34:34 2020 +0200" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Thu Apr 02 11:49:25 2020 +0200" }, "message": "Improve ctags invocation in Makefile\n\nAdding .function was necessary, as otherwise ctags would have no idea what to\ndo with those files.\n\nAdding .h may not be necessary, as by default ctags considers them C++ which\nis probably good enough, but since we\u0027re tuning the mapping anyway...\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n" }, { "commit": "901e87e5d1484bed62ad546ba0af5bd8fc1562e5", "tree": "4e63b0ecccefe95de5aaab78d339b45d390f42f6", "parents": [ "984c1f77c5f16a471c9389f772c07c01df4a48e3", "5c1584708608c48134c43fc9d019fda22dca5671" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Wed Apr 01 12:27:10 2020 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Apr 01 12:27:10 2020 +0200" }, "message": "Merge pull request #3124 from AndrzejKurek/typo_asn1_tests\n\n[mbedtls-2.16] Typo fix in test_suite_asn1write.function" }, { "commit": "984c1f77c5f16a471c9389f772c07c01df4a48e3", "tree": "37b1f9f2799435f0d58c0074f2dea47df7ede93c", "parents": [ "bfa0f7d54077dd278c7952e2d002b5206262c686", "5cc087945a8b17f9c3c367388a95cc6301acbe15" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Wed Apr 01 12:24:09 2020 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Apr 01 12:24:09 2020 +0200" }, "message": "Merge pull request #3136 from sbutcher-arm/additional-config-checks-2.16\n\nBackport 2.16: Add additional sanity checks to check_config.h" }, { "commit": "f60041688c8af902c59930afd25952f1003bcdcb", "tree": "175581413cdd8ce40075740221881f2dde2c84fb", "parents": [ "bfa0f7d54077dd278c7952e2d002b5206262c686" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Wed Mar 25 12:41:29 2020 +0100" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Wed Apr 01 11:02:18 2020 +0200" }, "message": "Fix leakage of projective coordinates in ECC\n\nSee the comments in the code for how an attack would go, and the ChangeLog\nentry for an impact assessment. (For ECDSA, leaking a few bits of the scalar\nover several signatures translates to full private key recovery using a\nlattice attack.)\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n" }, { "commit": "bfa0f7d54077dd278c7952e2d002b5206262c686", "tree": "9b811c3e10dfe1af8cc6ede16d64a942e554a32b", "parents": [ "edb58adaa19122cf9954c3ec543be91e5ad4105e", "e8caf2634b7ca9f72778a3bf7c8c0ae4a8516cc5" ], "author": { "name": "Janos Follath", "email": "janos.follath@arm.com", "time": "Tue Mar 31 15:38:32 2020 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Mar 31 15:38:32 2020 +0100" }, "message": "Merge pull request #3143 from gilles-peskine-arm/unmet_dependencies-int-2.16\n\n[2.16 only] Since unmet_dependencies stores integers, represent them as int" }, { "commit": "b08a3344a5e41d9bd87fdad634cd0d5e19cce433", "tree": "cdf0aa7336c8352b025789051f4d9943aeeb7c13", "parents": [ "7fe5ac1b62caec5b880db471bad73b16a87eceae" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Tue Mar 31 12:31:24 2020 +0200" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Tue Mar 31 12:32:38 2020 +0200" }, "message": "Improve debug logging of client hard reconnect\n\nThe current logging was sub-standard, in particular there was no trace\nwhatsoever of the HelloVerifyRequest being sent. Now it\u0027s being logged with\nthe usual levels: 4 for full content, 2 return of f_send, 1 decision about\nsending it (or taking other branches in the same function) because that\u0027s the\nsame level as state changes in the handshake, and also same as the \"possible\nclient reconnect\" message\" to which it\u0027s the logical continuation (what are we\ndoing about it?).\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n" }, { "commit": "7fe5ac1b62caec5b880db471bad73b16a87eceae", "tree": "6179a7512d7d56de789e0e660c4588958b16686f", "parents": [ "34cbf106f3f0a04efa262d89eb7b1e6d7017feda" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Mon Mar 30 12:46:21 2020 +0200" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Tue Mar 31 12:32:05 2020 +0200" }, "message": "Fix some style issues in udp_proxy\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n" }, { "commit": "e8caf2634b7ca9f72778a3bf7c8c0ae4a8516cc5", "tree": "e047db88dc5554da2e3fe691bf5a79388543cd4c", "parents": [ "96955d5c55729bd9a727ee6b7997ed33843f4c37" ], "author": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Tue Mar 31 10:56:00 2020 +0200" }, "committer": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Tue Mar 31 10:57:32 2020 +0200" }, "message": "Since unmet_dependencies stores integers, represent them as int\n\nSince unmet_dependencies only ever contains strings that are integers\nwritten out in decimal, store the integer instead. Do this\nunconditionally since it doesn\u0027t cost any extra memory.\n\nThis commit saves a little memory and more importantly avoids a gotcha\nwith uninitialized pointers which caused a bug on development (the\narray was only initialized in verbose mode).\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n" }, { "commit": "edb58adaa19122cf9954c3ec543be91e5ad4105e", "tree": "b3584e58c31daa7b5a0623b79df81609e13da46a", "parents": [ "96955d5c55729bd9a727ee6b7997ed33843f4c37", "a46f75cbad71ab66aed885f8aef698d5e24ac1f1" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Tue Mar 31 09:53:29 2020 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Mar 31 09:53:29 2020 +0200" }, "message": "Merge pull request #3106 from mpg/3013-2.16\n\n[backport 2.16] Fix function name in error message" }, { "commit": "34cbf106f3f0a04efa262d89eb7b1e6d7017feda", "tree": "b921c4ae24d7aa918d260fa03a1767c06496c914", "parents": [ "b85ce9eaeb982b0e037748c463c2d155d246e6d5" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Mon Sep 09 11:14:37 2019 +0200" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Tue Mar 31 09:37:31 2020 +0200" }, "message": "Adjust timeout of tests with \"no resend\" assertions\n\nThere are currently 4 tests in ssl-opt.sh with either -C \"resend\" or -S\n\"resend\", that is, asserting that no retransmission will occur. They sometimes\nfail on loaded CI machines as one side doesn\u0027t send a message fast enough,\ncausing the other side to retransmit, causing the test to fail.\n\n(For the \"reconnect\" test there was an other issue causing random failures,\nfixed in a previous commit, but even after that fix the test would still\nsometimes randomly fail, even if much more rarely.)\n\nWhile it\u0027s a hard problem to fix in a general and perfect way, in practice the\nprobability of failures can be drastically reduced by making the timeout\nvalues much larger.\n\nFor some tests, where retransmissions are actually expected, this would have\nthe negative effect of increasing the average running time of the test, as\neach side would wait for longer before it starts retransmission, so we have a\ntrade-off between average running time and probability of spurious failures.\n\nBut for tests where retransmission is not expected, there is no such trade-off\nas the expected running time of the test (assuming the code is correct most of\nthe time) is not impacted by the timeout value. So the only negative effect of\nincreasing the timeout value is on the worst-case running time on the test,\nwhich is much less important, as test should only fail quite rarely.\n\nThis commit addresses the easy case of tests that don\u0027t expect retransmission\nby increasing the value of their timeout range to 10s-20s. This value\ncorresponds to the value used for tests that assert `-S \"autoreduction\"` which\nare in the same case and where the current value seems acceptable so far.\n\nIt also represents an increase, compared to the values before this commit, of\na factor 20 for the \"reconnect\" tests which were frequently observed to fail\nin the CI, and of a factor 10 for the first two \"DTLS proxy\" tests, which were\nobserved to fail much less frequently, so hopefully the new values are enough\nto reduce the probability of spurious failures to an acceptable level.\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n" }, { "commit": "b85ce9eaeb982b0e037748c463c2d155d246e6d5", "tree": "75d17707876eab05f90868336ef9208f2b7fcd86", "parents": [ "96955d5c55729bd9a727ee6b7997ed33843f4c37" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Fri Mar 13 11:11:02 2020 +0100" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Tue Mar 31 09:37:28 2020 +0200" }, "message": "Add negative test for hard reconnect cookie check\n\nThe server must check client reachability (we chose to do that by checking a\ncookie) before destroying the existing association (RFC 6347 section 4.2.8).\nLet\u0027s make sure we do, by having a proxy-in-the-middle inject a ClientHello -\nthe server should notice, but not destroy the connection.\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n" }, { "commit": "5cc087945a8b17f9c3c367388a95cc6301acbe15", "tree": "42a95cedea2efb533089fb2c6ab2f29933624734", "parents": [ "14ba0ce43bb3c687fae6690a1667816c3f22f127" ], "author": { "name": "Simon Butcher", "email": "simon.butcher@arm.com", "time": "Fri Mar 27 16:55:35 2020 +0000" }, "committer": { "name": "Simon Butcher", "email": "simon.butcher@arm.com", "time": "Sat Mar 28 00:35:49 2020 +0000" }, "message": "Correct comment on the configuration option in x509.c\n\nIn x509.c, the self-test code is dependent on MBEDTLS_CERTS_C and\nMBEDTLS_SHA256_C being enabled. At some point in the recent past that dependency\nwas on MBEDTLS_SHA1_C but changed to SHA256, but the comment wasn\u0027t updated.\n\nThis commit updates the comment.\n\nSigned-off-by: Simon Butcher \u003csimon.butcher@arm.com\u003e\n" }, { "commit": "14ba0ce43bb3c687fae6690a1667816c3f22f127", "tree": "1ac2206f5cb2eccddf7d55cd1795aea74c6a58f3", "parents": [ "96955d5c55729bd9a727ee6b7997ed33843f4c37" ], "author": { "name": "Simon Butcher", "email": "simon.butcher@arm.com", "time": "Thu Apr 11 18:56:18 2019 +0100" }, "committer": { "name": "Simon Butcher", "email": "simon.butcher@arm.com", "time": "Sat Mar 28 00:35:38 2020 +0000" }, "message": "Add additional sanity checks to check_config.h\n\nAdditional sanity checks in check_config.h to ensure:\n * if test certificates are included (MBEDTLS_CERTS_C) there must be also be\n support for the core X509 feature (MBEDTLS_X509_USE_C). This has a\n secondary dependency on the public key abstraction layer (MBEDTLS_PK_C),\n necessary as the certificates will either be signed by RSA or ECDSA, and\n therefore need to be part of the library.\n * if any of the TLS protocols are defined (MBEDTLS_SSL_PROTO_xxx) then a\n key exchange method must also be defined (MBEDTLS_KEY_EXCHANGE_xxx).\n\nAnyone who knows the library will probably not make these mistakes or will\nquickly diagnose and fix them, but it is possible to compile and link both\nconfigurations if you build only the library and not the example programs, and\ntherefore users may not realise immediately that there\u0027s a mistake, only\ndiscovering it at runtime.\n\nThese checks may therefore save someone some time.\n\nSigned-off-by: Simon Butcher \u003csimon.butcher@arm.com\u003e\n" }, { "commit": "5c1584708608c48134c43fc9d019fda22dca5671", "tree": "3716f33147701fb46a45de69f42f272ff524fdfe", "parents": [ "96955d5c55729bd9a727ee6b7997ed33843f4c37" ], "author": { "name": "Andrzej Kurek", "email": "andrzej.kurek@arm.com", "time": "Wed Mar 25 07:48:11 2020 -0400" }, "committer": { "name": "Andrzej Kurek", "email": "andrzej.kurek@arm.com", "time": "Wed Mar 25 07:48:11 2020 -0400" }, "message": "Typo fix in test_suite_asn1write.function\n\n\nThis commit fixes issue #2782, spotted by tmarti2.\nSigned-off-by: Andrzej Kurek \u003candrzej.kurek@arm.com\u003e\n" }, { "commit": "96955d5c55729bd9a727ee6b7997ed33843f4c37", "tree": "6c13d7aa8ab55d93bf25bb86242638a1e72e0c95", "parents": [ "b5695d99970aa452d092f4626fb0969eae7d1713", "98a879a8062f803e34a2cd2ac1a30cec86e9448e" ], "author": { "name": "Gilles Peskine", "email": "gilles.peskine@arm.com", "time": "Tue Mar 24 19:48:15 2020 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Mar 24 19:48:15 2020 +0100" }, "message": "Merge pull request #3114 from mpg/ssl-opt-names-2.16\n\n[Backport 2.16] Improve some test names in ssl-opt.sh" }, { "commit": "98a879a8062f803e34a2cd2ac1a30cec86e9448e", "tree": "6c13d7aa8ab55d93bf25bb86242638a1e72e0c95", "parents": [ "b5695d99970aa452d092f4626fb0969eae7d1713" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Tue Mar 24 10:53:39 2020 +0100" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Tue Mar 24 10:57:23 2020 +0100" }, "message": "Improve some test names in ssl-opt.sh\n\n- \"Default\" should only be used for tests that actually use the defaults (ie,\n not passing options on the command line, except maybe debug/dtls)\n- All tests in the \"Encrypt then MAC\" group should start with that string as a\n common prefix\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n" }, { "commit": "a46f75cbad71ab66aed885f8aef698d5e24ac1f1", "tree": "f47e7313bfb33fbd6085e3f52307567cff0b609f", "parents": [ "b5695d99970aa452d092f4626fb0969eae7d1713" ], "author": { "name": "Ercan Ozturk", "email": "e.ozturk111@gmail.com", "time": "Tue Jan 28 21:51:04 2020 -0800" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Thu Mar 19 12:08:44 2020 +0100" }, "message": "Fix debug message by using the correct function name called\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n" }, { "commit": "b5695d99970aa452d092f4626fb0969eae7d1713", "tree": "1bc8b33e322a586383e8a3f31d32531351916565", "parents": [ "acfa36890c80971f915e46e90c2176185161d5ef", "47f728718f2a0bf3df7ae748e689edd5dd8045ba" ], "author": { "name": "Janos Follath", "email": "janos.follath@arm.com", "time": "Wed Mar 18 17:04:24 2020 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Mar 18 17:04:24 2020 +0000" }, "message": "Merge pull request #3101 from sbutcher-arm/change-used-pylint-2.16\n\nBackport 2.16: Change the use of pylint to optionally use pylint3" }, { "commit": "47f728718f2a0bf3df7ae748e689edd5dd8045ba", "tree": "1bc8b33e322a586383e8a3f31d32531351916565", "parents": [ "acfa36890c80971f915e46e90c2176185161d5ef" ], "author": { "name": "Simon Butcher", "email": "simon.butcher@arm.com", "time": "Mon Mar 16 11:30:46 2020 +0000" }, "committer": { "name": "Simon Butcher", "email": "simon.butcher@arm.com", "time": "Mon Mar 16 13:53:06 2020 +0000" }, "message": "Change the use of pylint to optionally use pylint3\n\nPylint when installed as a distro package can be installed as pylint3, whilst as\na PEP egg, it can be installed as pylint.\n\nThis commit changes the scripts to first use pylint if installed, and optionally\nlook for pylint3 if not installed. This is to allow a preference for the PEP\nversion over the distro version, assuming the PEP one is more likely to be\nthe correct one.\n\nSigned-off-by: Simon Butcher \u003csimon.butcher@arm.com\u003e\n" }, { "commit": "acfa36890c80971f915e46e90c2176185161d5ef", "tree": "83ff6fe377d9af0186695acdc434126ac99c90f8", "parents": [ "302f57a8c28aa2e2e7eb6d418f89c6815f4ea28b", "9f3bdb87e5e3d2c056fe6c53bce3491322e60f35" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Mon Mar 16 10:37:24 2020 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Mar 16 10:37:24 2020 +0100" }, "message": "Merge pull request #2439 from andresag01/mbedtls-2.16-iotssl-2544-deprecate-record-accel\n\nBackport 2.16: Fix compilation failure when MBEDTLS_SSL_HW_RECORD_ACCEL is enabled" }, { "commit": "302f57a8c28aa2e2e7eb6d418f89c6815f4ea28b", "tree": "c52289122b22b8890c6be849065b733883549a14", "parents": [ "874a64ece9164421ceff8643b7644276f1c6cbc5", "bae7328b32bba75f99bbea30056959522466da85" ], "author": { "name": "Jaeden Amero", "email": "jaeden.amero@arm.com", "time": "Tue Mar 10 17:28:34 2020 +0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Mar 10 17:28:34 2020 +0400" }, "message": "Merge pull request #3090 from sbutcher-arm/output-env-pylint-mbedtls-2.16\n\nBackport 2.16: Add Python, Perl and Pylint to output_env.sh" }, { "commit": "bae7328b32bba75f99bbea30056959522466da85", "tree": "c52289122b22b8890c6be849065b733883549a14", "parents": [ "85c4c865db3e991fbecfc9b5f4b2c8f21ba1c543" ], "author": { "name": "Simon Butcher", "email": "simon.butcher@arm.com", "time": "Fri Mar 06 14:50:49 2020 +0000" }, "committer": { "name": "Simon Butcher", "email": "simon.butcher@arm.com", "time": "Fri Mar 06 19:26:32 2020 +0000" }, "message": "Fix output_env.sh for varying pylint3 output\n\n`pylint3 --version` will output to stderr the status of the config file it\u0027s\nusing. This can be \"No config file found\" or \"Using config file\" or nothing.\nThis means the pylint version may or may not be on the first line.\n\nTherefore this commit changes the filters on the pylint3 version output to first\nstrip out the config line, and then to select only the pylint line.\n\nSigned-off-by: Simon Butcher \u003csimon.butcher@arm.com\u003e\n" }, { "commit": "85c4c865db3e991fbecfc9b5f4b2c8f21ba1c543", "tree": "b78e7358f2e0b62a82d51dcb98721a0b322c9848", "parents": [ "874a64ece9164421ceff8643b7644276f1c6cbc5" ], "author": { "name": "Simon Butcher", "email": "simon.butcher@arm.com", "time": "Thu Mar 05 15:18:53 2020 +0000" }, "committer": { "name": "Simon Butcher", "email": "simon.butcher@arm.com", "time": "Fri Mar 06 19:26:09 2020 +0000" }, "message": "Add Python, Perl and Pylint to output_env.sh\n\nAdd the versions of Python, Perl, and Pylint to the version dump provided by\nthe output_env.sh script.\n\nSigned-off-by: Simon Butcher \u003csimon.butcher@arm.com\u003e\n" }, { "commit": "874a64ece9164421ceff8643b7644276f1c6cbc5", "tree": "29c5b0dce50549e2b07db2e126e3df13f1b14149", "parents": [ "22348c78ee796f3829b32deecb23a208c2b9ab3b", "679d2de36b5d168598a3cc92e379e385105fb7ac" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Thu Mar 05 10:04:12 2020 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Mar 05 10:04:12 2020 +0100" }, "message": "Merge pull request #3083 from sbutcher-arm/output_env-enhancements-2.16\n\nBackport 2.16: Enhance the `output_env.sh` script with GBD and Distro version" }, { "commit": "679d2de36b5d168598a3cc92e379e385105fb7ac", "tree": "29c5b0dce50549e2b07db2e126e3df13f1b14149", "parents": [ "3104eec4cff5df9efdfa7b24008732d49551a0a4" ], "author": { "name": "Simon Butcher", "email": "simon.butcher@arm.com", "time": "Thu Feb 27 12:58:27 2020 +0000" }, "committer": { "name": "Simon Butcher", "email": "simon.butcher@arm.com", "time": "Wed Mar 04 11:31:05 2020 +0000" }, "message": "Make minor fixes to output_env.sh after review\n\nA number of clean-up improvements following review.\n * removal of redundant `` quotes\n * removal of non-portable echo \"\\n\", in favour of additional echo commands\n * change to use of uname to detemine if the platform is Linux or not\n * revised formatting of output\n * change to dpkg-query from dpkg to find installed libasan variants\n\nCo-Authored-By: Gilles Peskine \u003cgilles.peskine@arm.com\u003e\nSigned-off-by: Simon Butcher \u003csimon.butcher@arm.com\u003e\n" }, { "commit": "3104eec4cff5df9efdfa7b24008732d49551a0a4", "tree": "30bab2340cd860023684c8c89ef8125343ba373d", "parents": [ "22348c78ee796f3829b32deecb23a208c2b9ab3b" ], "author": { "name": "Simon Butcher", "email": "simon.butcher@arm.com", "time": "Wed Feb 26 15:29:40 2020 +0000" }, "committer": { "name": "Simon Butcher", "email": "simon.butcher@arm.com", "time": "Wed Mar 04 11:30:49 2020 +0000" }, "message": "Enhance the output_env.sh script\n\nThis commit adds additional information to the output_env.sh script of:\n * Linux distribution version (if available)\n * GDB version (if available)\n\nIt also makes some information clearer:\n * the type of OpenSSL/GNUTLS version (legacy/default/next)\n * and whether certain versions are not installed, or not configured\n\nAnd it simplifies the error messages for absent tools.\n\nSigned-off-by: Simon Butcher \u003csimon.butcher@arm.com\u003e\n" }, { "commit": "22348c78ee796f3829b32deecb23a208c2b9ab3b", "tree": "97eba0debc9bcb8aa21243766cbae04d37ebcfab", "parents": [ "d7c2737f40ec7793ef159398c9848a9db9b4a4f7", "21e9a4c3b6d3d564c75bb3ffc55e184f81a3107c" ], "author": { "name": "danh-arm", "email": "dan.handley@arm.com", "time": "Tue Mar 03 15:40:18 2020 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Mar 03 15:40:18 2020 +0000" }, "message": "Merge pull request #3063 from danh-arm/dh/drop-cla-2.16\n\n[backport 2.16] Drop requirement for a CLA" }, { "commit": "d7c2737f40ec7793ef159398c9848a9db9b4a4f7", "tree": "0b43a3eb748e13b2a7b6d7991b0f36daf0ffd991", "parents": [ "0fce215851cc069c5b5def12fcc18725055fa6cf", "498e632b0882057c50063cd57b4fe255ffbac8e5" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Tue Mar 03 12:11:56 2020 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Mar 03 12:11:56 2020 +0100" }, "message": "Merge pull request #3060 from mpg/skip-close-notify-2.16\n\n[backport 2.16] Fix possible close_notify/ClientHello confusion" }, { "commit": "21e9a4c3b6d3d564c75bb3ffc55e184f81a3107c", "tree": "7d2380f7e99d949c00b0c858464fbd3483b1e2d7", "parents": [ "0b54a46cda1725b7b01bcfd8065cb9bd69aedd3e" ], "author": { "name": "Dan Handley", "email": "dan.handley@arm.com", "time": "Wed Feb 19 09:34:20 2020 +0000" }, "committer": { "name": "Dan Handley", "email": "dan.handley@arm.com", "time": "Mon Mar 02 13:56:42 2020 +0000" }, "message": "Add project description to README.md\n\nAdd simple project description to README.md.\n\nSigned-off-by: Dan Handley \u003cdan.handley@arm.com\u003e\n" }, { "commit": "0b54a46cda1725b7b01bcfd8065cb9bd69aedd3e", "tree": "e6b90a05bc43f8cee6396e1d7f3bd31baace90f9", "parents": [ "69feadc782affa4a9b6bfb718fd5ef6460ada613" ], "author": { "name": "Dan Handley", "email": "dan.handley@arm.com", "time": "Tue Feb 18 18:00:05 2020 +0000" }, "committer": { "name": "Dan Handley", "email": "dan.handley@arm.com", "time": "Mon Mar 02 13:56:42 2020 +0000" }, "message": "Minor formatting fixes to CONTRIBUTING.md\n\nFix inconsistent list formatting in CONTRIBUTING.md.\n\nSigned-off-by: Dan Handley \u003cdan.handley@arm.com\u003e\n" }, { "commit": "69feadc782affa4a9b6bfb718fd5ef6460ada613", "tree": "6640b1e221b95e42baaf11189d32d11881d0690f", "parents": [ "0fce215851cc069c5b5def12fcc18725055fa6cf" ], "author": { "name": "Dan Handley", "email": "dan.handley@arm.com", "time": "Tue Feb 18 17:58:20 2020 +0000" }, "committer": { "name": "Dan Handley", "email": "dan.handley@arm.com", "time": "Mon Mar 02 13:56:32 2020 +0000" }, "message": "Drop requirement for a CLA\n\nThe Mbed TLS project no longer requires a CLA. Contributions from now on\nmust be made under both Apache-2.0 AND GPL-2.0-or-later licenses, to enable\nLTS (Long Term Support) branches of the software to continue to be provided\nunder either Apache-2.0 OR GPL-2.0-or-later. Contributors must accept the\nterms of the Developer Certificate of Origin (DCO) by adding a Signed-off-by:\nline to each commit message.\n\nThe software on the development branch continues to be provided under\nApache-2.0.\n\nUpdate README.md, CONTRIBUTING.md and pull_request_template.md to explain\nthe new licensing model. Add a copy of the DCO to the project.\n\nSigned-off-by: Dan Handley \u003cdan.handley@arm.com\u003e\n" }, { "commit": "9f3bdb87e5e3d2c056fe6c53bce3491322e60f35", "tree": "b0f9e30a36597e83ecf3783f9c578f604f18bac5", "parents": [ "52dbda62a0da3d36305b20e4fe955edaae68857b" ], "author": { "name": "Andres Amaya Garcia", "email": "andres.amayagarcia@arm.com", "time": "Wed Dec 05 22:03:56 2018 +0000" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Wed Feb 26 10:14:28 2020 +0100" }, "message": "Add test for MBEDTLS_SSL_HW_RECORD_ACCEL in all.sh\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n" }, { "commit": "52dbda62a0da3d36305b20e4fe955edaae68857b", "tree": "59db08416caa200591595cd2b0983fdf508a2d4f", "parents": [ "0fce215851cc069c5b5def12fcc18725055fa6cf" ], "author": { "name": "Andres Amaya Garcia", "email": "andres.amayagarcia@arm.com", "time": "Wed Dec 05 21:57:57 2018 +0000" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Wed Feb 26 10:13:27 2020 +0100" }, "message": "Fix compilation issue when DTLS and SSL_HW_RECORD_ACCEL are on\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n" }, { "commit": "498e632b0882057c50063cd57b4fe255ffbac8e5", "tree": "0b43a3eb748e13b2a7b6d7991b0f36daf0ffd991", "parents": [ "0fce215851cc069c5b5def12fcc18725055fa6cf" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Mon Feb 17 11:04:33 2020 +0100" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Wed Feb 26 09:33:05 2020 +0100" }, "message": "Fix possible close_notify/ClientHello confusion\n\nThe ssl-opt.sh test cases using session resumption tend to fail occasionally\non the CI due to a race condition in how ssl_server2 and ssl_client2 handle\nthe reconnection cycle.\n\nThe server does the following in order:\n- S1 send application data\n- S2 send a close_notify alert\n- S3 close the client socket\n- S4 wait for a \"new connection\" (actually a new datagram)\n- S5 start a handshake\n\nThe client does the following in order:\n- C1 wait for and read application data from the server\n- C2 send a close_notify alert\n- C3 close the server socket\n- C4 reset session data and re-open a server socket\n- C5 start a handshake\n\nIf the client has been able to send the close_notify (C2) and if has been\ndelivered to the server before if closes the client socket (S3), when the\nserver reaches S4, the datagram that we start the new connection will be the\nClientHello and everything will be fine.\n\nHowever if S3 wins the race and happens before the close_notify is delivered,\nin S4 the close_notify is what will be seen as the first datagram in a new\nconnection, and then in S5 this will rightfully be rejected as not being a\nvalid ClientHello and the server will close the connection (and go wait for\nanother one). The client will then fail to read from the socket and exit\nnon-zero and the ssl-opt.sh harness will correctly report this as a failure.\n\nIn order to avoid this race condition in test using ssl_client2 and\nssl_server2, this commits introduces a new command-line option\nskip_close_notify to ssl_client2 and uses it in all ssl-opt.sh tests that use\nsession resumption with DTLS and ssl_server2.\n\nThis works because ssl_server2 knows how many messages it expects in each\ndirection and in what order, and closes the connection after that rather than\nrelying on close_notify (which is also why there was a race in the first\nplace).\n\nTests that use another server (in practice there are two of them, using\nOpenSSL as a server) wouldn\u0027t work with skip_close_notify, as the server won\u0027t\nclose the connection until the client sends a close_notify, but for the same\nreason they don\u0027t need it (there is no race between receiving close_notify and\nclosing as the former is the cause of the later).\n\nAn alternative approach would be to make ssl_server2 keep the connection open\nuntil it receives a close_notify. Unfortunately it creates problems for tests\nwhere we simulate a lossy network, as the close_notify could be lost (and the\nclient can\u0027t retransmit it). We could modify udp_proxy with an option to never\ndrop alert messages, but when TLS 1.3 comes that would no longer work as the\ntype of messages will be encrypted.\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n" }, { "commit": "0fce215851cc069c5b5def12fcc18725055fa6cf", "tree": "672638177a5f237398cb7bda4249b27371852024", "parents": [ "0b59b6d82d0667cc44d7a8e28259a3c844007e6f", "04039a58937ceb586fd0be78dbf908c989a79acd" ], "author": { "name": "Janos Follath", "email": "janos.follath@arm.com", "time": "Wed Feb 19 17:14:10 2020 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Feb 19 17:14:10 2020 +0000" }, "message": "Merge pull request #3053 from yanesca/bump-version-2.16.5\n\nBump version 2.16.5" }, { "commit": "04039a58937ceb586fd0be78dbf908c989a79acd", "tree": "672638177a5f237398cb7bda4249b27371852024", "parents": [ "334cf5993090bd57a055f5bb5f327cf76da06f7f" ], "author": { "name": "Janos Follath", "email": "janos.follath@arm.com", "time": "Wed Feb 19 12:12:38 2020 +0000" }, "committer": { "name": "Janos Follath", "email": "janos.follath@arm.com", "time": "Wed Feb 19 12:12:38 2020 +0000" }, "message": "Add release info to ChangeLog\n" }, { "commit": "334cf5993090bd57a055f5bb5f327cf76da06f7f", "tree": "e59db87d2c3eb931c15cde4fe63ce44ec83d3656", "parents": [ "0b59b6d82d0667cc44d7a8e28259a3c844007e6f" ], "author": { "name": "Janos Follath", "email": "janos.follath@arm.com", "time": "Wed Feb 19 12:03:00 2020 +0000" }, "committer": { "name": "Janos Follath", "email": "janos.follath@arm.com", "time": "Wed Feb 19 12:03:00 2020 +0000" }, "message": "Bump version to Mbed TLS 2.16.5\n" }, { "commit": "0b59b6d82d0667cc44d7a8e28259a3c844007e6f", "tree": "5dc3fe71c57d4a52cd8a9ceb430cd3ae7d5c6f82", "parents": [ "a59988e19749353e886a27777aeb482522b53294", "6444d1557d7117fffff4bf0904a11c986a9d5c1a" ], "author": { "name": "Gilles Peskine", "email": "gilles.peskine@arm.com", "time": "Wed Feb 19 10:23:11 2020 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Feb 19 10:23:11 2020 +0100" }, "message": "Merge pull request #3048 from mpg/fix-rsa-complete-2.16\n\n[backport 2.16] Fix pk_parse_key()\u0027s use of rsa_complete()" }, { "commit": "6444d1557d7117fffff4bf0904a11c986a9d5c1a", "tree": "5dc3fe71c57d4a52cd8a9ceb430cd3ae7d5c6f82", "parents": [ "d09fcdedb9b8679037096613466ff86166f7207f" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Wed Feb 19 09:31:38 2020 +0100" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Wed Feb 19 09:31:38 2020 +0100" }, "message": "Add ChangeLog entries for pk_parse_key() fixes\n" }, { "commit": "d09fcdedb9b8679037096613466ff86166f7207f", "tree": "76b510887db0c1efeb3a7b9dfeb6a1d8ae1f667d", "parents": [ "96ed13e21b07cc63553a95640818393072916475" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "mpg@elzevir.fr", "time": "Tue Feb 18 10:22:54 2020 +0100" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Tue Feb 18 10:49:06 2020 +0100" }, "message": "Fix pkparse bug wrt MBEDTLS_RSA_ALT\n\nSome code paths want to access members of the mbedtls_rsa_context structure.\nWe can only do that when using our own implementation, as otherwise we don\u0027t\nknow anything about that structure.\n" }, { "commit": "96ed13e21b07cc63553a95640818393072916475", "tree": "25dd8f38a2edb956aba61b328801a7098258f3d8", "parents": [ "12fb9c383d58eebc6d43c3258e14d69fa155de5b" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "mpg@elzevir.fr", "time": "Mon Feb 10 12:49:50 2020 +0100" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Tue Feb 18 10:49:06 2020 +0100" }, "message": "Test each failure mode of pk_parse_key_pkcs1_der()\n\n(Only the top-level ones, ie, for each call to eg asn1_get_mpi(), ensure\nthere\u0027s at least one test case that makes this call fail in one way, but don\u0027t\ntest the various ways to make asn1_get_mpi fail - that should be covered\nelsewhere.)\n\n- the new checks added by the previous commits needed exercising\n- existing tests sometimes had wrong descriptions or where passing for the\n wrong reason (eg with the \"length mismatch\" test, the function actually\nfailed before reaching the length check)\n- while at it, add tests for the rest as well\n\nThe valid minimal-size key was generated with:\n\nopenssl genrsa 128 2\u003e/dev/null | openssl rsa -outform der 2\u003e/dev/null | xxd -p\n" }, { "commit": "12fb9c383d58eebc6d43c3258e14d69fa155de5b", "tree": "7471e14e7b1033046421229636bb1c38a526ee1c", "parents": [ "25bb8dc2289c9f755302a85baa585d01645f58a8" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "mpg@elzevir.fr", "time": "Mon Feb 10 10:50:16 2020 +0100" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Tue Feb 18 10:49:06 2020 +0100" }, "message": "Clean up test function pk_parse_key\n\n- remove incorrect compile-time dependency (the individual cases already have\n correct run-time dependency information)\n- remove unused argument\n- remove unused stack buffer\n- remove useless code block\n" }, { "commit": "25bb8dc2289c9f755302a85baa585d01645f58a8", "tree": "69a831887be5e75c39a072a4c52ba2b268f41c52", "parents": [ "9ab0305700b876241deffd9f3147c8f3eabd4a14" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "mpg@elzevir.fr", "time": "Fri Feb 14 11:28:47 2020 +0100" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Tue Feb 18 10:49:06 2020 +0100" }, "message": "Check public part when parsing private RSA key\n" }, { "commit": "9ab0305700b876241deffd9f3147c8f3eabd4a14", "tree": "9792f4e1d8d71c81327df2cc72a9aa98daa97a5f", "parents": [ "a59988e19749353e886a27777aeb482522b53294" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "mpg@elzevir.fr", "time": "Tue Feb 18 10:12:14 2020 +0100" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Tue Feb 18 10:49:06 2020 +0100" }, "message": "Don\u0027t pass zero to rsa_complete() as a param\n\nWhen parsing a PKCS#1 RSAPrivateKey structure, all parameters are always\npresent. After importing them, we need to call rsa_complete() for the sake of\nalternative implementations. That function interprets zero as a signal for\n\"this parameter was not provided\". As that\u0027s never the case, we mustn\u0027t pass\nany zero value to that function, so we need to explicitly check for it.\n" }, { "commit": "a59988e19749353e886a27777aeb482522b53294", "tree": "f8f9d0c2a916d2c10ce178df995578071a2232ea", "parents": [ "8d9b1c471c130ca2fbe1669c4b1c326d1d46ac9a", "0fe92c2f4faa4c1379b5589f94b78388814e5542" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Tue Feb 11 09:17:09 2020 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Feb 11 09:17:09 2020 +0100" }, "message": "Merge pull request #3029 from gilles-peskine-arm/test-opt-all-2.16\n\nBackport 2.16: Fix and test the full config with gcc and clang" }, { "commit": "8d9b1c471c130ca2fbe1669c4b1c326d1d46ac9a", "tree": "333b14dd150f1a41859c4c315795d8bef85288f0", "parents": [ "b458b1f5520da15e8b113300242c573cb09ca3a2", "8ece8572b287a0fded3ed4061baa1df03f1ad92b" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Thu Feb 06 09:52:11 2020 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Feb 06 09:52:11 2020 +0100" }, "message": "Merge pull request #3027 from gilles-peskine-arm/mpi_copy_shrink-2.16\n\nBackport 2.16: Improve robustness and testing of mbedtls_mpi_copy" }, { "commit": "b458b1f5520da15e8b113300242c573cb09ca3a2", "tree": "dd2db89e2310380c2615cd4c55c4bd82a5f30c65", "parents": [ "82ebf511e911b98f7f173d08b694d831085e21df", "cabf0eed66e5fb73b5fae0d036f39660a9c7dfc3" ], "author": { "name": "Janos Follath", "email": "janos.follath@arm.com", "time": "Wed Feb 05 15:13:02 2020 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Feb 05 15:13:02 2020 +0000" }, "message": "Merge pull request #3034 from yanesca/revert_pr_3012\n\nRevert \"Merge pull request #3012 from Patater/dev/jp-bennett/developm…" }, { "commit": "cabf0eed66e5fb73b5fae0d036f39660a9c7dfc3", "tree": "dd2db89e2310380c2615cd4c55c4bd82a5f30c65", "parents": [ "82ebf511e911b98f7f173d08b694d831085e21df" ], "author": { "name": "Janos Follath", "email": "janos.follath@arm.com", "time": "Tue Feb 04 14:42:15 2020 +0000" }, "committer": { "name": "Janos Follath", "email": "janos.follath@arm.com", "time": "Tue Feb 04 14:42:15 2020 +0000" }, "message": "Revert \"Merge pull request #3012 from Patater/dev/jp-bennett/development-2.16\"\n\nThis reverts commit 7550e857bf85bc169271b9edefb1e8ee04bc3042, reversing\nchanges made to d0c25753241b0ea2b120bfa506d558f76c8c1430.\n\nstat() will never return S_IFLNK as the file type, as stat()\nexplicitly follows symlinks.\n\nFixes #3005.\n" }, { "commit": "82ebf511e911b98f7f173d08b694d831085e21df", "tree": "436c4a461ea672c9bb4b2719e9486b8776dd7577", "parents": [ "c63676a0bb0e824b461a73b1baaa863e1468d363", "d20ae896ea0bf492528176d6600b6f798e416718" ], "author": { "name": "Janos Follath", "email": "janos.follath@arm.com", "time": "Tue Feb 04 11:18:30 2020 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Feb 04 11:18:30 2020 +0000" }, "message": "Merge pull request #3019 from mpg/fix-ssl-opt-gnutls-no-sha1-2.16\n\n[backport 2.16] Fix ssl-opt.sh for GnuTLS versions rejecting SHA-1" }, { "commit": "0fe92c2f4faa4c1379b5589f94b78388814e5542", "tree": "6cd32d5e6069c1507720ee590ca834648648fb30", "parents": [ "99d70d8cb1a2c4bedf084afcc82397e773e19cbb" ], "author": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Fri Sep 20 19:56:06 2019 +0200" }, "committer": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Mon Feb 03 20:03:39 2020 +0100" }, "message": "Test GCC and Clang with common build options\n\nGoals:\n* Build with common compilers with common options, so that we don\u0027t\n miss a (potentially useful) warning only triggered with certain\n build options.\n* A previous commit removed -O0 test jobs, leaving only the one with\n -m32. We have inline assembly that is disabled with -O0, falling\n back to generic C code. This commit restores a test that runs the\n generic C code on a 64-bit platform.\n" }, { "commit": "99d70d8cb1a2c4bedf084afcc82397e773e19cbb", "tree": "7e4aad61dca0a5d61ad60a9714002d230f2d9944", "parents": [ "c63676a0bb0e824b461a73b1baaa863e1468d363" ], "author": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Fri Sep 20 19:23:10 2019 +0200" }, "committer": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Mon Feb 03 20:03:39 2020 +0100" }, "message": "Replace -O0 by -O1 or -Os in most components\n\nGcc skips some analyses when compiling with -O0, so we may miss\nwarnings about things like uninitialized variables.\n" }, { "commit": "8ece8572b287a0fded3ed4061baa1df03f1ad92b", "tree": "129f6f9e0251a2cb0d1b7dd0e0dff51b90bf0f64", "parents": [ "e0ced3a3d6527e5a43878f75bd3591e4a34db1d0" ], "author": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Mon Feb 03 16:18:30 2020 +0100" }, "committer": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Mon Feb 03 16:21:32 2020 +0100" }, "message": "shrink tests: clearer description\n" }, { "commit": "e0ced3a3d6527e5a43878f75bd3591e4a34db1d0", "tree": "306afe9fa4a1903abd80bef9e6390ec43aace606", "parents": [ "56427c2d2ba9046963669f1c6e0941b46e91523b" ], "author": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Mon Feb 03 16:15:47 2020 +0100" }, "committer": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Mon Feb 03 16:21:31 2020 +0100" }, "message": "Move test functions from Lilliput to Blefuscu\n\nWe normally represent bignums in big-endian order and there is no\nreason to deviate here.\n" }, { "commit": "56427c2d2ba9046963669f1c6e0941b46e91523b", "tree": "152536d53a3fa7bc1c5830aefecd47b7f3c953bd", "parents": [ "27c15c7853e33cc942a43c18d0c3afe3f608b95f" ], "author": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Tue Jan 21 13:59:51 2020 +0100" }, "committer": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Mon Feb 03 16:21:31 2020 +0100" }, "message": "Minor comment improvement\n" }, { "commit": "27c15c7853e33cc942a43c18d0c3afe3f608b95f", "tree": "4950812e0eaec88aa93ce3c5d172f3a3c67f6a73", "parents": [ "3e9f5228c8072ce2821d2158ba8f2e561d5e5c21" ], "author": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Mon Jan 20 21:17:43 2020 +0100" }, "committer": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Mon Feb 03 16:21:31 2020 +0100" }, "message": "Improve comments in mpi_shrink\n" }, { "commit": "3e9f5228c8072ce2821d2158ba8f2e561d5e5c21", "tree": "3275f65a78714100ae5c48e1cd79a094e39cb515", "parents": [ "8fe3b79cdb4825668c54367e2b1ed5c6f08b5144" ], "author": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Mon Jan 20 21:12:50 2020 +0100" }, "committer": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Mon Feb 03 16:21:31 2020 +0100" }, "message": "mpi_copy: make the 0 case slightly more robust\n\nIf Y was constructed through functions in this module, then Y-\u003en \u003d\u003d 0\niff Y-\u003ep \u003d\u003d NULL. However we do not prevent filling mpi structures\nmanually, and zero may be represented with n\u003d0 and p a valid pointer.\nMost of the code can cope with such a representation, but for the\nsource of mbedtls_mpi_copy, this would cause an integer underflow.\nChanging the test for zero from Y-\u003ep\u003d\u003dNULL to Y-\u003en\u003d\u003d0 causes this case\nto work at no extra cost.\n" }, { "commit": "8fe3b79cdb4825668c54367e2b1ed5c6f08b5144", "tree": "3e402f451f03a8432e31cbe6ab4b2e02bc941a26", "parents": [ "e6cca7c937c0c484d6f0a78140ef50a274a556fa" ], "author": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Mon Jan 20 21:01:51 2020 +0100" }, "committer": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Mon Feb 03 16:21:31 2020 +0100" }, "message": "Better coverage for copy and swap\n\nCover more cases: different signs, different zeronesses, repeated\nargument.\n" }, { "commit": "e6cca7c937c0c484d6f0a78140ef50a274a556fa", "tree": "32b26547fc342b5cf7651102ab8d4a81434abe11", "parents": [ "c63676a0bb0e824b461a73b1baaa863e1468d363" ], "author": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Mon Jan 20 17:19:03 2020 +0100" }, "committer": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Mon Feb 03 16:21:31 2020 +0100" }, "message": "Bignum copy/shrink: More precise test case descriptions\n" }, { "commit": "c63676a0bb0e824b461a73b1baaa863e1468d363", "tree": "8ee9392231be98fc10135b5ea578e337da2cfd08", "parents": [ "a7b9007d60c0d763b76b4d4e8718599a72f025b8", "4cc20f6f3dc35185e48f28f9f2cad5db857319ce" ], "author": { "name": "Gilles Peskine", "email": "gilles.peskine@arm.com", "time": "Fri Jan 31 16:37:41 2020 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jan 31 16:37:41 2020 +0100" }, "message": "Merge pull request #3016 from jack-fortanix/jack/parse-rsa-crt-2.16\n\nBackport 2.16: Parse RSA parameters DP, DQ and QP from PKCS1 private keys" }, { "commit": "4cc20f6f3dc35185e48f28f9f2cad5db857319ce", "tree": "ae661b160e6f0dbfe07833a6a24e12af7bd09972", "parents": [ "216c44d6eb62a412a81abc99095f9723e257b7bb" ], "author": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Fri Jan 31 12:20:10 2020 +0100" }, "committer": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Fri Jan 31 12:20:10 2020 +0100" }, "message": "Fix duplicated Bugfix section in the changelog\n" }, { "commit": "216c44d6eb62a412a81abc99095f9723e257b7bb", "tree": "a911f26318365fb56e2c1b81ca011846d4c4bc5b", "parents": [ "b10fd065be4378eab92923a05cc2670df0af5aca" ], "author": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Fri Jan 31 12:05:53 2020 +0100" }, "committer": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Fri Jan 31 12:06:43 2020 +0100" }, "message": "Add changelog entry\n" }, { "commit": "a7b9007d60c0d763b76b4d4e8718599a72f025b8", "tree": "3b0e8e4191bf4e764c65a35ae1242f9654f66c78", "parents": [ "bac9f1bfb00d70064052e6ab04eb7d9cb89dc1e1", "114d339756a1f77c21ef585d871dcae3d4222d03" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Fri Jan 31 09:22:30 2020 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jan 31 09:22:30 2020 +0100" }, "message": "Merge pull request #2972 from mpg/add-zlib-tests-2.16\n\n[2.16] Add zlib tests" }, { "commit": "d20ae896ea0bf492528176d6600b6f798e416718", "tree": "681d7bd3960cb346f8e463294fc82805a20027df", "parents": [ "7c9add2f64d67e7fc01b62eab4cc51668024f6a3" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Thu Jan 30 12:45:14 2020 +0100" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Thu Jan 30 12:48:46 2020 +0100" }, "message": "De-duplicate SHA1-independent test in ssl-opt.sh\n\nThe splitting of this test into two versions depending on whether SHA-1 was\nallowed by the server was a mistake in\n5d2511c4d48eb197697466d1bd6b776cf09b0e7c - the test has nothing to do with\nSHA-1 in the first place, as the server doesn\u0027t request a certificate from\nthe client so it doesn\u0027t matter if the server accepts SHA-1 or not.\n" }, { "commit": "7c9add2f64d67e7fc01b62eab4cc51668024f6a3", "tree": "5e992e661f33be81cf2023e277a0fc7196a5fa82", "parents": [ "bac9f1bfb00d70064052e6ab04eb7d9cb89dc1e1" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Thu Jan 30 10:58:57 2020 +0100" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Thu Jan 30 11:25:22 2020 +0100" }, "message": "Fix ssl-opt.sh for GnuTLS versions rejecting SHA-1\n\nWhile the whole script makes (often implicit) assumptions about the version of\nGnuTLS used, generally speaking it should work out of the box with the version\npackaged on our reference testing platform, which is Ubuntu 16.04 so far.\n\nWith the update from Jan 8 2020 (3.4.10-4ubuntu1.6), the patches for rejecting\nSHA-1 in certificate signatures were backported, so we should avoid presenting\nSHA-1 signed certificates to a GnuTLS peer in ssl-opt.sh.\n" }, { "commit": "b10fd065be4378eab92923a05cc2670df0af5aca", "tree": "ae2d2b914368517127d3eb06a35c2c328089a28d", "parents": [ "bac9f1bfb00d70064052e6ab04eb7d9cb89dc1e1" ], "author": { "name": "Jack Lloyd", "email": "jack.lloyd@fortanix.com", "time": "Wed Jan 29 13:09:55 2020 -0500" }, "committer": { "name": "Jack Lloyd", "email": "jack.lloyd@fortanix.com", "time": "Wed Jan 29 13:09:55 2020 -0500" }, "message": "Parse RSA parameters DP, DQ and QP from PKCS1 private keys\n\nOtherwise these values are recomputed in mbedtls_rsa_deduce_crt, which\ncurrently suffers from side channel issues in the computation of QP\n(see https://eprint.iacr.org/2020/055). By loading the pre-computed\nvalues not only is the side channel avoided, but runtime overhead of\nloading RSA keys is reduced.\n\nDiscussion in https://github.com/ARMmbed/mbed-crypto/issues/347\n\nBackport of https://github.com/ARMmbed/mbed-crypto/pull/352\n" }, { "commit": "bac9f1bfb00d70064052e6ab04eb7d9cb89dc1e1", "tree": "df078690906b7383e83a9519ef0316e2cd538dab", "parents": [ "1f10f2e282b6249ce6e22380c8afdd8c2bf8047e", "75aab5276f9490b6b0220daee23ff4423a59495d" ], "author": { "name": "Janos Follath", "email": "janos.follath@arm.com", "time": "Wed Jan 29 14:49:23 2020 +0000" }, "committer": { "name": "Janos Follath", "email": "janos.follath@arm.com", "time": "Wed Jan 29 14:49:23 2020 +0000" }, "message": "Merge pull request #3001 from from gilles-peskine-arm/coverity-20200115-2.16 into mbedtls-2.16\n" }, { "commit": "1f10f2e282b6249ce6e22380c8afdd8c2bf8047e", "tree": "fc153aa3d14f3cb99c89f3dcb2af82652f4878c5", "parents": [ "7550e857bf85bc169271b9edefb1e8ee04bc3042", "58c27790de882ec1dd59438a5894c0a604036a27" ], "author": { "name": "Janos Follath", "email": "janos.follath@arm.com", "time": "Wed Jan 29 14:07:17 2020 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jan 29 14:07:17 2020 +0000" }, "message": "Merge pull request #3014 from mpg/fix-attribution-ecdsa-inc\n\n[2.16] Fix contributor names in ChangeLog" }, { "commit": "58c27790de882ec1dd59438a5894c0a604036a27", "tree": "fc153aa3d14f3cb99c89f3dcb2af82652f4878c5", "parents": [ "cc41e6cd75af08e6cc5ad74be203ccc6ebcd6012" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Wed Jan 29 11:32:09 2020 +0100" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Wed Jan 29 11:32:09 2020 +0100" }, "message": "Fix previous ChangeLog merging error\n" }, { "commit": "cc41e6cd75af08e6cc5ad74be203ccc6ebcd6012", "tree": "bc3cd580eee1b53a180f6df006a1a63920f0980a", "parents": [ "7550e857bf85bc169271b9edefb1e8ee04bc3042" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Wed Jan 29 10:47:34 2020 +0100" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Wed Jan 29 10:47:34 2020 +0100" }, "message": "Fix contributor names in ChangeLog\n" }, { "commit": "114d339756a1f77c21ef585d871dcae3d4222d03", "tree": "39c79cfc9cfb9b5d2082002a3b9487c16479c18c", "parents": [ "95a17fbe172654c4c54acb032852d3d5d432fab0" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Fri Jan 24 10:17:20 2020 +0100" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Wed Jan 29 09:50:54 2020 +0100" }, "message": "Add detection for zlib headers to all.sh\n" }, { "commit": "7550e857bf85bc169271b9edefb1e8ee04bc3042", "tree": "0f6379fdf6e0d69502f49f7fbce69c5510add51f", "parents": [ "d0c25753241b0ea2b120bfa506d558f76c8c1430", "68a24eba000b00bedfccada89b530efc8c14a548" ], "author": { "name": "Jaeden Amero", "email": "jaeden.amero@arm.com", "time": "Tue Jan 28 15:55:54 2020 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jan 28 15:55:54 2020 +0000" }, "message": "Merge pull request #3012 from Patater/dev/jp-bennett/development-2.16\n\nBackport 2.16: Allow loading symlinked certificates" }, { "commit": "d0c25753241b0ea2b120bfa506d558f76c8c1430", "tree": "570eac346bcab0349521b9ef1438a09508cad5aa", "parents": [ "b0deeccc58e43e5e776879617b892d6184a812df", "32b0216dd7441d18ee233d499cc3e5ea924d914a" ], "author": { "name": "Janos Follath", "email": "janos.follath@arm.com", "time": "Tue Jan 28 11:32:46 2020 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jan 28 11:32:46 2020 +0000" }, "message": "Merge pull request #2992 from yanesca/bump-version-2.16.4\n\nBump version to Mbed TLS 2.16.4" }, { "commit": "68a24eba000b00bedfccada89b530efc8c14a548", "tree": "1c4e491e491998a15dc143b95210dd729c87c16a", "parents": [ "6f45cb995b51039df76873ca2ef6bfde2bc90941" ], "author": { "name": "Jaeden Amero", "email": "jaeden.amero@arm.com", "time": "Fri Jan 24 18:20:22 2020 +0000" }, "committer": { "name": "Jaeden Amero", "email": "jaeden@patater.com", "time": "Tue Jan 28 11:29:16 2020 +0000" }, "message": "Add ChangeLog entry\n\nAdd a ChangeLog entry for Jonathan Bennett\u0027s contribution which allows\nloading symlinked certificates.\n" }, { "commit": "6f45cb995b51039df76873ca2ef6bfde2bc90941", "tree": "9d82d2bf5d83d43b2fbe5320f683881be94de05a", "parents": [ "b0deeccc58e43e5e776879617b892d6184a812df" ], "author": { "name": "Jonathan Bennett", "email": "JBennett@incomsystems.biz", "time": "Fri Jan 24 09:12:03 2020 -0600" }, "committer": { "name": "Jaeden Amero", "email": "jaeden@patater.com", "time": "Tue Jan 28 11:28:42 2020 +0000" }, "message": "Allow loading symlinked certificates\n\nWhen mbedtls_x509_crt_parse_path() checks each object in the supplied path, it only processes regular files. This change makes it also accept a symlink to a file. Fixes #3005.\n\nThis was observed to be a problem on Fedora/CentOS/RHEL systems, where the ca-bundle in the default location is actually a symlink.\n" }, { "commit": "b0deeccc58e43e5e776879617b892d6184a812df", "tree": "5d55d380b35a09a5a63909268e61d186478b2f10", "parents": [ "39e2c0eeb6501980764793e8d54c49c0a42bde48", "42b8194b53988089df43cf2b95137fd08db3fda6" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Tue Jan 28 09:26:43 2020 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jan 28 09:26:43 2020 +0100" }, "message": "Merge pull request #3007 from mpg/fix-ecdsa-pointer-inc\n\n[Backport 2.16] Fix incrementing pointer instead of value" }, { "commit": "75aab5276f9490b6b0220daee23ff4423a59495d", "tree": "c86662f469bce02c5e4f3d84230cd2176e5c4dd1", "parents": [ "1a30fbbd3b6ad74bfb9a13a24ba11c07aab9dd5e" ], "author": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Tue Jan 21 16:52:08 2020 +0100" }, "committer": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Mon Jan 27 15:16:16 2020 +0100" }, "message": "Add missing return code check on calls to mbedtls_md()\n" }, { "commit": "1a30fbbd3b6ad74bfb9a13a24ba11c07aab9dd5e", "tree": "6a2ce148676a6c25f134ba12996df8802133bdb4", "parents": [ "83a5672ae13de8358370e0bbaa6fcc71d93d2e8c" ], "author": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Tue Jan 21 16:30:53 2020 +0100" }, "committer": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Mon Jan 27 15:16:16 2020 +0100" }, "message": "Check that mbedtls_mpi_grow succeeds\n" }, { "commit": "83a5672ae13de8358370e0bbaa6fcc71d93d2e8c", "tree": "91012e1ab94abc6ecbdb4c19a4f1df7478a1a30b", "parents": [ "42e4f6b706fafbd3f172f2e0c92bd3f238e2ba41" ], "author": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Tue Jan 21 15:02:14 2020 +0100" }, "committer": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Mon Jan 27 15:16:16 2020 +0100" }, "message": "Remove redundant block_size validity check\n\nCheck the value only once, as soon as we\u0027ve obtained it.\n" }, { "commit": "42b8194b53988089df43cf2b95137fd08db3fda6", "tree": "5d55d380b35a09a5a63909268e61d186478b2f10", "parents": [ "39e2c0eeb6501980764793e8d54c49c0a42bde48" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "mpg@elzevir.fr", "time": "Fri Jan 24 12:11:56 2020 +0100" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Fri Jan 24 12:35:47 2020 +0100" }, "message": "Fix incrementing pointer instead of value\n\nThis was introduced by a hasty search-and-replace that didn\u0027t account for C\u0027s\noperator precedence when changing those variables to pointer types.\n" }, { "commit": "42e4f6b706fafbd3f172f2e0c92bd3f238e2ba41", "tree": "862a99a39182155f45040c28559969b595f9445e", "parents": [ "3a3b161e9629ffcece3909c04a7369a49e8c44cc" ], "author": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Wed Jan 22 19:04:19 2020 +0100" }, "committer": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Wed Jan 22 19:04:19 2020 +0100" }, "message": "Add changelog entry for the unchecked mbedtls_md call\n" }, { "commit": "3a3b161e9629ffcece3909c04a7369a49e8c44cc", "tree": "8a9af66e849c297b4cddf22ab7c7c53bfd6c22a8", "parents": [ "39e2c0eeb6501980764793e8d54c49c0a42bde48" ], "author": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Tue Jan 21 16:56:03 2020 +0100" }, "committer": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Wed Jan 22 18:59:37 2020 +0100" }, "message": "Add missing return code check on call to mbedtls_md()\n" }, { "commit": "32b0216dd7441d18ee233d499cc3e5ea924d914a", "tree": "0494c31af1363f524dba857d4c30d8b7d5e79884", "parents": [ "39e2c0eeb6501980764793e8d54c49c0a42bde48" ], "author": { "name": "Janos Follath", "email": "janos.follath@arm.com", "time": "Mon Jan 20 14:32:57 2020 +0000" }, "committer": { "name": "Janos Follath", "email": "janos.follath@arm.com", "time": "Mon Jan 20 14:32:57 2020 +0000" }, "message": "Bump version to Mbed TLS 2.16.4\n" }, { "commit": "39e2c0eeb6501980764793e8d54c49c0a42bde48", "tree": "eceb1af3f070dab74ae4df96fcfd91e4d0b6b409", "parents": [ "1dfc361a50657c3b598411c397dcbdf53631b02d", "f02988e5779ee081f9fc85234a9f5b9ed2eaee8f" ], "author": { "name": "Jaeden Amero", "email": "jaeden.amero@arm.com", "time": "Wed Jan 15 16:46:46 2020 +0000" }, "committer": { "name": "Jaeden Amero", "email": "jaeden.amero@arm.com", "time": "Wed Jan 15 16:59:41 2020 +0000" }, "message": "Merge remote-tracking branch \u0027origin/mbedtls-2.16\u0027 into mbedtls-2.16-restricted\n\n* origin/mbedtls-2.16:\n Fix some pylint warnings\n Enable more test cases without MBEDTLS_MEMORY_DEBUG\n More accurate test case description\n Clarify that the \"FATAL\" message is expected\n Note that mbedtls_ctr_drbg_seed() must not be called twice\n Fix CTR_DRBG benchmark\n Changelog entry for xxx_drbg_set_entropy_len before xxx_drbg_seed\n CTR_DRBG: support set_entropy_len() before seed()\n CTR_DRBG: Don\u0027t use functions before they\u0027re defined\n HMAC_DRBG: support set_entropy_len() before seed()\n" }, { "commit": "95a17fbe172654c4c54acb032852d3d5d432fab0", "tree": "6b150534239222061dd082b1431f3986ebe4861a", "parents": [ "4ef189df49a8f329db34aa473860ecbaa4e96a5e" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Thu Jan 02 11:58:00 2020 +0100" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Fri Jan 03 10:03:15 2020 +0100" }, "message": "Add test for record compression in ssl-opt.sh\n\nDeprecated but still needs to be tested.\n" }, { "commit": "4ef189df49a8f329db34aa473860ecbaa4e96a5e", "tree": "36f874a8e9545592d2a40c93dd70a09bb6052c24", "parents": [ "f02988e5779ee081f9fc85234a9f5b9ed2eaee8f" ], "author": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Thu Jan 02 11:45:12 2020 +0100" }, "committer": { "name": "Manuel Pégourié-Gonnard", "email": "manuel.pegourie-gonnard@arm.com", "time": "Fri Jan 03 10:03:15 2020 +0100" }, "message": "Add all.sh components with ZLIB enabled\n\nZLIB support is deprecated, but until it\u0027s removed it should still be tested.\n" }, { "commit": "f02988e5779ee081f9fc85234a9f5b9ed2eaee8f", "tree": "6d464c8553556f392a641218c1010e3c7de391f9", "parents": [ "c0546439c4f7ab577d30ac3d50a1e742f5002f44", "349a079f2dc1ecbd62a1684dc3601442809689ef" ], "author": { "name": "Jaeden Amero", "email": "jaeden.amero@arm.com", "time": "Fri Dec 20 16:07:01 2019 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Dec 20 16:07:01 2019 +0000" }, "message": "Merge pull request #2967 from dgreen-arm/backport-2.16-fix-pylint-warnings\n\nBackport 2.16: Fix some pylint warnings" }, { "commit": "349a079f2dc1ecbd62a1684dc3601442809689ef", "tree": "6d464c8553556f392a641218c1010e3c7de391f9", "parents": [ "c0546439c4f7ab577d30ac3d50a1e742f5002f44" ], "author": { "name": "Darryl Green", "email": "darryl.green@arm.com", "time": "Tue Dec 17 10:17:20 2019 +0000" }, "committer": { "name": "Darryl Green", "email": "darryl.green@arm.com", "time": "Fri Dec 20 13:01:08 2019 +0000" }, "message": "Fix some pylint warnings\n\nFix a too-long line to meet PEP8 standards\n" }, { "commit": "c0546439c4f7ab577d30ac3d50a1e742f5002f44", "tree": "dcc78a5632dcf6d61141b1ea90f6e252f53cd99a", "parents": [ "269d4141895f7ea59f4a26aed878536601a10ad1", "b02a2332189749bad75806ab414bd40701c65f44" ], "author": { "name": "Jaeden Amero", "email": "jaeden.amero@arm.com", "time": "Fri Nov 29 16:17:34 2019 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Nov 29 16:17:34 2019 +0000" }, "message": "Merge pull request #2894 from gilles-peskine-arm/drbg-set_entropy_len-2.16\n\nBackport 2.16: Allow xxx_drbg_set_entropy_len before xxx_drbg_seed" }, { "commit": "1dfc361a50657c3b598411c397dcbdf53631b02d", "tree": "b9b85633372c339e784fc011cbe34a54573a4a5b", "parents": [ "f0486052b712ddbdcd88248a32bad55629a12ee2", "86dd9501ba5e635b6cd6678f0d6154d5f3845d55" ], "author": { "name": "Jaeden Amero", "email": "jaeden.amero@arm.com", "time": "Thu Nov 28 15:02:17 2019 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Nov 28 15:02:17 2019 +0000" }, "message": "Merge pull request #672 from gilles-peskine-arm/ctr_drbg-aes_fail-2.16\n\nBackport 2.16: Uncaught AES failure in CTR_DRBG" }, { "commit": "86dd9501ba5e635b6cd6678f0d6154d5f3845d55", "tree": "b9b85633372c339e784fc011cbe34a54573a4a5b", "parents": [ "f0486052b712ddbdcd88248a32bad55629a12ee2" ], "author": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Thu Nov 28 09:45:32 2019 +0100" }, "committer": { "name": "Gilles Peskine", "email": "Gilles.Peskine@arm.com", "time": "Thu Nov 28 09:57:44 2019 +0100" }, "message": "Catch AES failure in mbedtls_ctr_drbg_random\n\nThe functions mbedtls_ctr_drbg_random() and\nmbedtls_ctr_drbg_random_with_add() could return 0 if an AES function\nfailed. This could only happen with alternative AES\nimplementations (the built-in implementation of the AES functions\ninvolved never fail), typically due to a failure in a hardware\naccelerator.\n\nBug reported and fix proposed by Johan Uppman Bruce and Christoffer\nLauri, Sectra.\n" } ], "next": "269d4141895f7ea59f4a26aed878536601a10ad1" }