yuzu-emu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-11-25 17:05:42 +01:00
Code Issues Packages Projects Releases Wiki Activity

- Fixed potential memory zeroization on miscrafted RSA key

Browse Source
This commit is contained in:
Paul Bakker 2012-07-05 13:58:08 +00:00
parent 5552c8c0b3
commit 3c16db9a10
2 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ChangeLog
View File

@ -51,6 +51,8 @@ Security
Frama-C team at CEA LIST)
* Fixed generation of DHM parameters to correct length (found by Ruslan
Yushchenko)
* Fixed potential memory zeroization on miscrafted RSA key (found by Eloi
Vanderbeken)
= Version 1.1.3 released on 2012-04-29
Bugfix

2
library/rsa.c
View File

@ -679,7 +679,7 @@ int rsa_pkcs1_sign( rsa_context *ctx,
return( POLARSSL_ERR_RSA_BAD_INPUT_DATA );
}
if( nb_pad < 8 )
if( ( nb_pad < 8 ) || ( nb_pad > olen ) )
return( POLARSSL_ERR_RSA_BAD_INPUT_DATA );
*p++ = 0;