Gilles Peskine

Make jsonschema optional when parsing driver

6

`generate_driver_wrappers.py` currently requires two Python packages: Jinja2 and jsonschema. Jinja2 is fundamentally necessary, but jsonschema is only used for validation and could be optional. A lot of consumers of the...

Clarify the documentation of mbedtls_pk_setup_opaque

1

In the documentation of `mbedtls_pk_setup_opaque`, clarify which algorithm the functions `mbedtls_pk_{sign,verify,encrypt,decrypt}` will perform with the resulting key. Definition of done: updated documentation, and possibly add unit tests if the documentation...

In the realfull config, context types with alt variants are not documented

3

We use the `realfull` config (`config.py realfull` in 2.2x and 3.0, `config.pl realfull` in 2.16) as a way to generate documentation for everything. All the boolean options in `config.h` are...

Internal compiler error in Visual Studio 2015

1

At the time of writing, the `development` branch triggers an internal compiler error in Visual Studio 2015 when building `library/psa_crypto_ecp.c`. The problem started between fb133513d60e037c626e919e1ff76c2bc6446481 ([pass](https://mbedtls.trustedfirmware.org/blue/rest/organizations/jenkins/pipelines/mbed-tls-nightly-tests/runs/381/nodes/605/steps/3211/log/?start=0)) and 4d4891e18ac336d8c85e67828fdb2c582461f449 ([fail](https://mbedtls.trustedfirmware.org/blue/rest/organizations/jenkins/pipelines/mbed-tls-nightly-tests/runs/381/nodes/605/steps/3211/log/?start=0)) ([diff](https://github.com/Mbed-TLS/mbedtls/compare/fb133513d60e037c626e919e1ff76c2bc6446481..4d4891e18ac336d8c85e67828fdb2c582461f449))....

As a developer of Mbed TLS, I want to know which dependencies to put on test cases so that my tests compile in all desired configurations. For example: * Can...

Fixes #8730. ## PR checklist Please tick as appropriate and edit the reasons (e.g.: "backport: not needed because this is a new feature") - [x] **changelog** no (? not sure....

Weird indentation inside parentheses in preprocessor directives

1

Uncrustify seems to sometimes indent preprocessor directives incorrectly when they contain a multiline parenthesized expression. Configuration file: ``` indent_columns = 4 ``` Sample input (only the first half with preprocessor...

Fix skipped tests in configurations without RSA

4

Tighten the matching when detecting which certificates are in use to determine algorithm requirements. This fixes a bug whereby all tests were skipped in configurations without RSA except for an...

Many tests are skipped in test-ref-configs

2

Looking at the [logs of `component_test_ref_configs`](https://mbedtls.trustedfirmware.org/job/mbed-tls-nightly-tests/579/execution/node/5455/log/?consoleFull) on `development`, a lot of intended test cases are not executed. Contrast with [2.28](https://mbedtls.trustedfirmware.org/job/mbed-tls-nightly-tests/580/execution/node/4174/log/). For example, with `config-thread.h`, which focuses on ECJPAKE, both in...

Fix problems found by clang+UBSan on Ubuntu 20.04

7

Fix some issues reported by UBSan with a recent Clang (but not by a recent GCC or an old Clang). They are genuine instances of undefined behavior, although in practice...