harshal.patil ed7153ef41 fix(mbedtls): validate cert header extent before reading it in bundle check ...

esp_crt_check_bundle() read the 4-byte certificate header (name_len,
key_len) via esp_crt_get_len() after only checking that the cert's
start offset lies inside the bundle, so a crafted bundle whose first
or last certificate starts within the final 3 bytes caused a transient
out-of-bounds read of up to 3 bytes before the extent check rejected
it. Require the whole header to lie inside the bundle before reading
it.

2026-08-31 13:31:36 +08:00

..

include

feat(mbedtls/esp_crt_bundle): Move dummy cert to .rodata to save 408B from dram

2024-10-16 16:21:28 +05:30

test_gen_crt_bundle

change(mbedtls/crt_bundle): Unify gen_crt_bundle output with esp-pylib

2026-08-19 16:22:57 +05:30

cacrt_all.pem

change(mbedtls/crt_bundle): Update esp_crt_bundle certificates

2026-08-19 17:08:51 +05:30

cacrt_deprecated.pem

change(mbedtls/crt_bundle): Update esp_crt_bundle certificates

2026-08-19 17:08:51 +05:30

cacrt_local.pem

fix(mbedtls): re-include Comodo AAA Services root

2025-06-16 15:55:39 +05:30

cmn_crt_authorities.csv

change(mbedtls/crt_bundle): Update esp_cmn_crt_bundle certificates

2026-06-10 10:10:43 +05:30

esp_crt_bundle.c

fix(mbedtls): validate cert header extent before reading it in bundle check

2026-08-31 13:31:36 +08:00

gen_crt_bundle.py

change(mbedtls/crt_bundle): Unify gen_crt_bundle output with esp-pylib

2026-08-19 16:22:57 +05:30