CVSROOT:        /cvs
Module name:    ports
Changes by:     [email protected]    2017/10/20 18:47:52

Modified files:
        security/polarssl: Makefile distinfo 
        security/polarssl/patches: patch-CMakeLists_txt 
                                   patch-include_mbedtls_config_h 
        security/polarssl/pkg: PLIST 
Added files:
        security/polarssl/patches: patch-tests_suites_main_test_function 

Log message:
Update to mbedtls-2.6.0

https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2017-01

mentions 3 security issues, at least CVE-2017-2784 (Freeing of memory
allocated on stack when validating a public key with a secp224k1 curve)
affects mbedtls-2.2.1.

Packaging:
- bump major of shared libs since symbols have been removed
- tweak license marker
- kill code in testsuite that fails to build with our stdio
implementation (can't take the address of stdout, the C standard
warns about that)
- kill some debug flags set by cmake

Make test passes on amd64 and arm, also tests & ok juanfra@

Reply via email to