1. f472a82 Fix heap-buffer overread in ALPN ext parsing by Manuel Pégourié-Gonnard · 8 years ago
  2. 9872634 Merge branch 'mbedtls-1.3' into mbedtls-1.3-restricted by Manuel Pégourié-Gonnard · 8 years ago
  3. 8833e86 Timing self test: shorten redundant tests by Gilles Peskine · 8 years ago
  4. e405069 Timing self test: print some diagnosis information by Gilles Peskine · 8 years ago
  5. 2484ffe get_timer: don't use uninitialized memory by Gilles Peskine · 8 years ago
  6. de896eb Timing: fix set_alarm(0) on Unix/POSIX by Gilles Peskine · 8 years ago
  7. b2da79c Merge remote-tracking branch 'upstream-restricted/pr/435' into mbedtls-1.3-restricted by Gilles Peskine · 8 years ago
  8. ba110ba Merge branch 'mbedtls-1.3' into mbedtls-1.3-restricted by Manuel Pégourié-Gonnard · 8 years ago
  9. cc3e3b0 Merge remote-tracking branch 'public/pr/1161' into mbedtls-1.3 by Manuel Pégourié-Gonnard · 8 years ago
  10. 921eb59 Fix magic constant in previous commit by Manuel Pégourié-Gonnard · 8 years ago
  11. 3ea75b3 Fix SSLv3 MAC computation by Manuel Pégourié-Gonnard · 8 years ago
  12. 917969e Merge branch 'mbedtls-1.3' into mbedtls-1.3-restricted by Manuel Pégourié-Gonnard · 8 years ago
  13. ccbbfdf Merge remote-tracking branch 'public/pr/1186' into mbedtls-1.3 by Manuel Pégourié-Gonnard · 8 years ago
  14. 3790b47 Merge branch 'mbedtls-1.3' into mbedtls-1.3-restricted by Gilles Peskine · 8 years ago
  15. 4905e6c Merge branch 'pr_1045' into mbedtls-1.3 by Gilles Peskine · 8 years ago
  16. 6e20636 Merge remote-tracking branch 'upstream-public/pr/1175' into mbedtls-1.3 by Gilles Peskine · 8 years ago
  17. 258bf59 Merge remote-tracking branch 'upstream-restricted/pr/426' into mbedtls-1.3-restricted by Gilles Peskine · 8 years ago
  18. bb709d7 Fix build without MBEDTLS_FS_IO by Gilles Peskine · 8 years ago
  19. af86fb9 Merge branch 'mbedtls-1.3' into mbedtls-1.3-restricted by Gilles Peskine · 8 years ago
  20. 3a3228c Merge remote-tracking branch 'upstream-public/pr/1155' into mbedtls-1.3 by Gilles Peskine · 8 years ago
  21. 9f423b1 Merge remote-tracking branch 'upstream-public/pr/917' into mbedtls-1.3 by Gilles Peskine · 8 years ago
  22. 2cd7c18 Merge branch 'mbedtls-1.3' into mbedtls-1.3-restricted by Gilles Peskine · 8 years ago
  23. 8c94611 Merge branch 'pr_1083' into mbedtls-1.3 by Gilles Peskine · 8 years ago
  24. f15cbda Merge remote-tracking branch 'upstream-public/pr/1109' into mbedtls-1.3 by Gilles Peskine · 8 years ago
  25. f945a22 Merge remote-tracking branch 'upstream-public/pr/944' into mbedtls-1.3 by Gilles Peskine · 8 years ago
  26. 6f941d6 Merge remote-tracking branch 'upstream-restricted/pr/423' into mbedtls-1.3-restricted by Gilles Peskine · 8 years ago
  27. b087a88 Merge remote-tracking branch 'upstream-restricted/pr/405' into mbedtls-1.3-restricted by Gilles Peskine · 8 years ago
  28. 2bd6ca4 Merge remote-tracking branch 'upstream-restricted/pr/402' into mbedtls-1.3-restricted by Gilles Peskine · 8 years ago
  29. d3dd8d2 Merge remote-tracking branch 'upstream-restricted/pr/387' into mbedtls-1.3-restricted by Gilles Peskine · 8 years ago
  30. b662cc1 Avoid uninitialized variable warning in entropy_gather_internal by Gilles Peskine · 8 years ago
  31. 3036cbe Merge branch 'mbedtls-1.3' into mbedtls-1.3-restricted by Gilles Peskine · 8 years ago
  32. e298532 Merge remote-tracking branch 'upstream-public/pr/1113' into mbedtls-1.3 by Gilles Peskine · 8 years ago
  33. 1dc3443 Merge branch 'iotssl-1368-unsafe-bounds-check-psk-identity-merge-1.3' into mbedtls-1.3-restricted by Gilles Peskine · 8 years ago
  34. 408dfd1 Merge remote-tracking branch 'restricted/pr/418' into mbedtls-1.3-restricted by Manuel Pégourié-Gonnard · 8 years ago
  35. 0a139f9 Modify debug output by Hanno Becker · 8 years ago
  36. fdac76f Add checks for private parameter in ecdsa_sign() by Darryl Green · 8 years ago
  37. 251bab5 Fix heap corruption in ssl_decrypt_buf by Hanno Becker · 8 years ago
  38. 9f60bc5 Address PR review comments by Ron Eldor · 8 years ago
  39. 1f311ed Backport 1.3:Fix crash when calling `mbedtls_ssl_cache_free` twice by Ron Eldor · 8 years ago
  40. c210289 Zeroize stack before returning from mpi_fill_random by Hanno Becker · 8 years ago
  41. 754663f Fix information leak in ecp_gen_keypair_base by Hanno Becker · 8 years ago
  42. 0727ca4 Make mpi_read_binary time constant by Hanno Becker · 8 years ago
  43. bfd0991 Fix handling of HS msgs in ssl_read if renegotiation unused by Hanno Becker · 8 years ago
  44. 268191a Swap branches accepting/refusing renegotiation in in ssl_read by Hanno Becker · 8 years ago
  45. 28474f4 RSA PSS: remove redundant check; changelog by Gilles Peskine · 8 years ago
  46. 5d9224e RSA PSS: fix first byte check for keys of size 8N+1 by Gilles Peskine · 8 years ago
  47. 7addb7f RSA PSS: fix minimum length check for keys of size 8N+1 by Gilles Peskine · 8 years ago
  48. 511bb84 RSA: Fix another buffer overflow in PSS signature verification by Gilles Peskine · 8 years ago
  49. 55db24c RSA: Fix buffer overflow in PSS signature verification by Gilles Peskine · 8 years ago
  50. 7c02d13 Correctly handle leap year in x509_date_is_valid() by Andres AG · 9 years ago
  51. 4491a79 Parse Signature Algorithm ext when renegotiating by Ron Eldor · 8 years ago
  52. cf42873 Fix coding style in x509_parse_int() by Andres Amaya Garcia · 8 years ago
  53. 876214c Change param type for x509_parse_int() to fix warn by Andres Amaya Garcia · 8 years ago
  54. 8388be3 Add brackets around net.c macro arguments by Andres Amaya Garcia · 8 years ago
  55. a4d1857 Fix type in net.c comment by Andres Amaya Garcia · 8 years ago
  56. 6e5e9aa Fix MSVC warning in net.c by Andres Amaya Garcia · 8 years ago
  57. ef4acc5 Minor style and typo corrections by Hanno Becker · 8 years ago
  58. 7c3c97a Don't add extensions for X.509 non-v3 certificates by Hanno Becker · 8 years ago
  59. 3c89dca Omit version from X.509 v1 certificates by Hanno Becker · 8 years ago
  60. b9ac47c Make ssl_set_hostname safe to be called multiple times by Hanno Becker · 8 years ago
  61. 20f4c78 Correct parsing checks in `pk_parse_key` by Hanno Becker · 8 years ago
  62. 1d23339 Remove unreachable branches in pkparse.c by Hanno Becker · 8 years ago
  63. 1f30fa1 Remove unnecessary cast by Hanno Becker · 8 years ago
  64. b299a37 Add missing calls to pem_free in pk_parse by Hanno Becker · 8 years ago
  65. 713c9e1 Use in-place decryption in pk_parse_pkcs8_encrypted_der by Hanno Becker · 8 years ago
  66. 2bc85eb Fix extraction of signature-type from PK context instance by Hanno Becker · 8 years ago
  67. 77359c9 DHM: Fix dhm_check_range() always returning 0 by Janos Follath · 8 years ago
  68. 3d98b97 Modify zeroize internal buffers in md modules by Andres Amaya Garcia · 8 years ago
  69. adb9bd2 Add internal macro ENTROPY_HAVE_DEFAULT indicating default entropy by Hanno Becker · 8 years ago
  70. 27ce0b5 Backport 1.3:Set PEM buffer to zero before freeing it by Ron Eldor · 8 years ago
  71. 03bd022 Update version to 1.3.21 by Simon Butcher · 8 years ago
  72. e13b54e Change PK module preprocessor check on word size by Andres Amaya Garcia · 8 years ago
  73. ab3fbc2 Rename time and index parameter to avoid name conflict. by Hanno Becker · 8 years ago
  74. 5308f47 Fix implementation-defined integer conversion by Janos Follath · 8 years ago
  75. 77644f2 Improve comments by Manuel Pégourié-Gonnard · 8 years ago
  76. d0e7557 Only return VERIFY_FAILED from a single point by Manuel Pégourié-Gonnard · 8 years ago
  77. 8af7bfa Improve behaviour on fatal errors by Manuel Pégourié-Gonnard · 8 years ago
  78. 3df4e4e Prevent signed integer overflow in CSR parsing by Andres AG · 8 years ago
  79. 47f3059 Fix potential integer overflow parsing DER CRT by Andres AG · 8 years ago
  80. 26124be Fix potential integer overflow parsing DER CRL by Andres AG · 8 years ago
  81. 57501ef Backport 1.3: Check rc of mbedtls_mpi_fill_random by Ron Eldor · 9 years ago
  82. 454da1f Backport 1.3: Resource leak fix on windows by Ron Eldor · 9 years ago
  83. 7771824 Backport 1.3: Wrong preproccessor condition fix by Ron Eldor · 9 years ago
  84. 4f1e64e Backport 1.3: check if iv is zero in gcm. by Ron Eldor · 9 years ago
  85. 2d829fb Zeroize buf if mbedtls_base64_decode() fails by Andres Amaya Garcia · 8 years ago
  86. 1bfa46a Zeroize tmp buffer in entropy_update() by Andres Amaya Garcia · 8 years ago
  87. c0dc5b5 Zeroize tmp buf in ctr_drbg_write_seed_file() by Andres Amaya Garcia · 8 years ago
  88. f4660aa Zeroize heap buf on failure in pem.c by Andres Amaya Garcia · 8 years ago
  89. a0ae1db Zeroize buffers in various modules by Andres Amaya Garcia · 8 years ago
  90. c381444 Zeroize tmp buf in mbedtls_mpi_fill_random() by Andres Amaya Garcia · 8 years ago
  91. dd47178 Zeroize tmp bufs in ctr_drbg.c functions by Andres Amaya Garcia · 8 years ago
  92. ff13995 Zeroize return buf on failure in pkparse.c by Andres Amaya Garcia · 8 years ago
  93. beb4283 Zeroize tmp bufs in hmac_drbg.c functions by Andres Amaya Garcia · 8 years ago
  94. fa6fa68 Zeroize tmp bufs in entropy.c functions by Andres Amaya Garcia · 8 years ago
  95. f148312 Zeroize tmp buf on fail in load_file() dhm.c by Andres Amaya Garcia · 8 years ago
  96. b2ee6b4 Prevent bounds check bypass through overflow in PSK identity parsing by Hanno Becker · 8 years ago
  97. 8a2855e Update the version number to 1.3.20 by Simon Butcher · 8 years ago mbedtls-1.3.20
  98. b870179 Merge remote-tracking branch 'restricted/iotssl-1398_backport-1.3' into mbedtls-1.3-restricted by Manuel Pégourié-Gonnard · 8 years ago
  99. 249c30c Merge branch 'mbedtls-1.3' into mbedtls-1.3-restricted by Manuel Pégourié-Gonnard · 8 years ago
  100. 5745778 Don't parse or write extensions in SSLv3 by Hanno Becker · 8 years ago