TBB: replace assert() with runtime checks in PolarSSL module
Using assert() to check the length of keys and hashes included in
a certificate is not a safe approach because assert() only applies
to debug builds. A malformed certificate could exploit security
flaws in release binaries due to buffer overflows.

This patch replaces assert() with runtime checkings in the PolarSSL
authentication module, so malformed certificates can not cause a
memory overflow.

Change-Id: I42ba912020595752c806cbd242fe3c74077d993b
1 parent c3da66b commit d5e0a933b3e6e0ff43e6d46982b93605a5eadf05
@Juan Castillo Juan Castillo authored on 10 Mar 2015
Showing 1 changed file
View
common/auth/polarssl/polarssl.c