CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2017/10/20 18:47:52
Modified files:
security/polarssl: Makefile distinfo
security/polarssl/patches: patch-CMakeLists_txt
patch-include_mbedtls_config_h
security/polarssl/pkg: PLIST
Added files:
security/polarssl/patches: patch-tests_suites_main_test_function
Log message:
Update to mbedtls-2.6.0
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2017-01
mentions 3 security issues, at least CVE-2017-2784 (Freeing of memory
allocated on stack when validating a public key with a secp224k1 curve)
affects mbedtls-2.2.1.
Packaging:
- bump major of shared libs since symbols have been removed
- tweak license marker
- kill code in testsuite that fails to build with our stdio
implementation (can't take the address of stdout, the C standard
warns about that)
- kill some debug flags set by cmake
Make test passes on amd64 and arm, also tests & ok juanfra@