deleted file mode 100644
@@ -1,84 +0,0 @@
-From 52f28bd5149360f8e3bf8ca13d3fb9a77283df7c Mon Sep 17 00:00:00 2001
-From: Sean Parkinson <sean@wolfssl.com>
-Date: Wed, 6 Nov 2019 08:28:09 +1000
-Subject: [PATCH] Check domain name location index hasn't exceed maximum before
- setting
-
-[CVE-2019–18840]
-Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
----
- wolfcrypt/src/asn.c | 30 ++++++++++++++++++++----------
- 1 file changed, 20 insertions(+), 10 deletions(-)
-
-diff --git a/wolfcrypt/src/asn.c b/wolfcrypt/src/asn.c
-index 637f4c355..d3793b7b3 100644
---- a/wolfcrypt/src/asn.c
-+++ b/wolfcrypt/src/asn.c
-@@ -5117,8 +5117,10 @@ static int GetName(DecodedCert* cert, int nameType)
- XMEMCPY(&full[idx], &cert->source[cert->srcIdx], strLen);
- idx += strLen;
- #if defined(OPENSSL_EXTRA)
-- /* store order that DN was parsed */
-- dName->loc[count++] = id;
-+ if (count < DOMAIN_COMPONENT_MAX) {
-+ /* store order that DN was parsed */
-+ dName->loc[count++] = id;
-+ }
- #endif
- }
-
-@@ -5191,8 +5193,10 @@ static int GetName(DecodedCert* cert, int nameType)
- XMEMCPY(&full[idx], &cert->source[cert->srcIdx], strLen);
- idx += strLen;
- #if defined(OPENSSL_EXTRA)
-- /* store order that DN was parsed */
-- dName->loc[count++] = id;
-+ if (count < DOMAIN_COMPONENT_MAX) {
-+ /* store order that DN was parsed */
-+ dName->loc[count++] = id;
-+ }
- #endif
- }
-
-@@ -5276,8 +5280,10 @@ static int GetName(DecodedCert* cert, int nameType)
- XMEMCPY(&full[idx], &cert->source[cert->srcIdx], adv);
- idx += adv;
- #if defined(OPENSSL_EXTRA)
-- /* store order that DN was parsed */
-- dName->loc[count++] = ASN_EMAIL_NAME;
-+ if (count < DOMAIN_COMPONENT_MAX) {
-+ /* store order that DN was parsed */
-+ dName->loc[count++] = ASN_EMAIL_NAME;
-+ }
- #endif
- }
- }
-@@ -5298,8 +5304,10 @@ static int GetName(DecodedCert* cert, int nameType)
- dName->uidLen = adv;
-
- #ifdef OPENSSL_EXTRA
-- /* store order that DN was parsed */
-- dName->loc[count++] = ASN_USER_ID;
-+ if (count < DOMAIN_COMPONENT_MAX) {
-+ /* store order that DN was parsed */
-+ dName->loc[count++] = ASN_USER_ID;
-+ }
- #endif
- #endif /* OPENSSL_EXTRA */
- break;
-@@ -5315,8 +5323,10 @@ static int GetName(DecodedCert* cert, int nameType)
- dcnum++;
-
- #ifdef OPENSSL_EXTRA
-- /* store order that DN was parsed */
-- dName->loc[count++] = ASN_DOMAIN_COMPONENT;
-+ if (count < DOMAIN_COMPONENT_MAX) {
-+ /* store order that DN was parsed */
-+ dName->loc[count++] = ASN_DOMAIN_COMPONENT;
-+ }
- #endif
- #endif /* OPENSSL_EXTRA */
- break;
-2.20.1
-
@@ -1,5 +1,5 @@
# Locally computed:
-sha256 3562af485c26cd7abe94d9404fbfc0c5c9bceb4aab29b81ebf5e6c2467507e12 wolfssl-4.2.0-stable.tar.gz
+sha256 6896f8ad6c44aff3e583006eeee839600848a0e37118ebbb7514eca9409ae08b wolfssl-4.3.0-stable.tar.gz
# Hash for license files:
sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 COPYING
@@ -4,7 +4,7 @@
#
################################################################################
-WOLFSSL_VERSION = 4.2.0-stable
+WOLFSSL_VERSION = 4.3.0-stable
WOLFSSL_SITE = $(call github,wolfSSL,wolfssl,v$(WOLFSSL_VERSION))
WOLFSSL_INSTALL_STAGING = YES
Remove patch already applied upstream (refactored on commit c06efb6c1fda0) Signed-off-by: Sergio Prado <sergio.prado@e-labworks.com> --- ...e-location-index-hasn-t-exceed-maxim.patch | 84 ------------------- package/wolfssl/wolfssl.hash | 2 +- package/wolfssl/wolfssl.mk | 2 +- 3 files changed, 2 insertions(+), 86 deletions(-) delete mode 100644 package/wolfssl/0001-Check-domain-name-location-index-hasn-t-exceed-maxim.patch