commit 370717b5717347fadbc183bdd3a109db6a840651
author Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> Thu Feb 11 10:35:13 2016 +0100
committer Simon Butcher <simon.butcher@arm.com> Wed Mar 09 21:06:19 2016 +0000
tree 2a0965246bc5e794467e965181dbd0d7dfbc9d02
parent cc4eba73fb79a2efb6bcc28590c7f82ebc629604

Add precision about exploitability in ChangeLog

Also fix some whitespace while at it.

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index 4650dc5..bcfe0ac 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -5,6 +5,7 @@
 Security
    * Fix potential integer overflow to buffer overflow in
      mbedtls_rsa_rsaes_pkcs1_v15_encrypt and mbedtls_rsa_rsaes_oaep_encrypt
+     (not triggerable remotely in (D)TLS).
 
 Bugfix
    * Fix bug in mbedtls_mpi_add_mpi() that caused wrong results when the three

library/rsa.c

diff --git a/library/rsa.c b/library/rsa.c
index 3cb92f4..9150e87 100644
--- a/library/rsa.c
+++ b/library/rsa.c
@@ -595,7 +595,7 @@
         return( MBEDTLS_ERR_RSA_BAD_INPUT_DATA );
 
     olen = ctx->len;
-    
+
     // first comparison checks for overflow
     if( ilen + 11 < ilen || olen < ilen + 11 )
         return( MBEDTLS_ERR_RSA_BAD_INPUT_DATA );