Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-10-01 10:40:47 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix(mbedtls): bound *iv_off in DMA esp_aes_crypt_ofb to prevent OOB read

Browse Source
This commit is contained in:
Ashish Sharma
2026-08-25 13:35:50 +08:00
parent 4751d66bd0
commit 25f5e205cd
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
components/mbedtls/port/aes/dma/esp_aes.c
+9
View File
@@ -436,6 +436,15 @@ int esp_aes_crypt_ofb(esp_aes_context *ctx,
n = *iv_off;
/* iv[] is a fixed AES_BLOCK_BYTES buffer and n indexes it directly (before the modulo update),
* so a caller-supplied *iv_off >= AES_BLOCK_BYTES -- attacker-controlled via the TEE secure
* service -- is an out-of-bounds read of iv[] in TEE context (CWE-125), leaking adjacent
* memory into the output. Bound it here, matching the block esp_aes_crypt_ofb() variant. */
if (n >= AES_BLOCK_BYTES) {
ESP_LOGE(TAG, "IV offset out of bounds");
return MBEDTLS_ERR_AES_BAD_INPUT_DATA;
}
/* If there is an offset then use the output of the previous AES block
(the updated IV) to calculate the new output */
while (n > 0 && length > 0) {