tree 6ae7782502617517be42203511575f06e85d7eba
parent 6497b5a1d10e59caa45c77bdcfacfeada1337ac0
author Gilles Peskine <Gilles.Peskine@arm.com> 1656601420 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> 1656601420 +0200

Call setbuf when reading or writing files: library

After opening a file containing sensitive data, call mbedtls_setbuf() to
disable buffering. This way, we don't expose sensitive data to a memory
disclosure vulnerability in a buffer outside our control.

This commit adds a call to mbedtls_setbuf() after each call to fopen(),
except:
* In ctr_drbg.c, in load_file(), because this is only used for DH parameters
  and they are not confidential data.
* In psa_its_file.c, in psa_its_remove(), because the file is only opened
  to check its existence, we don't read data from it.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>