mirror of
https://github.com/yuzu-emu/mbedtls.git
synced 2024-12-23 15:05:41 +00:00
Add length check in ecp_drbg_seed()
While this is a static function, so right now we know we don't need the check, things may change in the future, so better be on the safe side. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
This commit is contained in:
parent
4539a45cbf
commit
1215c54754
|
@ -181,6 +181,12 @@ static int ecp_drbg_seed( ecp_drbg_context *ctx,
|
||||||
const mbedtls_md_type_t md_type = mbedtls_md_list()[0];
|
const mbedtls_md_type_t md_type = mbedtls_md_list()[0];
|
||||||
const mbedtls_md_info_t *md_info = mbedtls_md_info_from_type( md_type );
|
const mbedtls_md_info_t *md_info = mbedtls_md_info_from_type( md_type );
|
||||||
|
|
||||||
|
if( secret_len > MBEDTLS_ECP_MAX_BYTES )
|
||||||
|
{
|
||||||
|
ret = MBEDTLS_ERR_ECP_RANDOM_FAILED;
|
||||||
|
goto cleanup;
|
||||||
|
}
|
||||||
|
|
||||||
MBEDTLS_MPI_CHK( mbedtls_mpi_write_binary( secret,
|
MBEDTLS_MPI_CHK( mbedtls_mpi_write_binary( secret,
|
||||||
secret_bytes, secret_len ) );
|
secret_bytes, secret_len ) );
|
||||||
|
|
||||||
|
@ -237,6 +243,12 @@ static int ecp_drbg_seed( ecp_drbg_context *ctx,
|
||||||
int ret;
|
int ret;
|
||||||
unsigned char secret_bytes[MBEDTLS_ECP_MAX_BYTES];
|
unsigned char secret_bytes[MBEDTLS_ECP_MAX_BYTES];
|
||||||
|
|
||||||
|
if( secret_len > MBEDTLS_ECP_MAX_BYTES )
|
||||||
|
{
|
||||||
|
ret = MBEDTLS_ERR_ECP_RANDOM_FAILED;
|
||||||
|
goto cleanup;
|
||||||
|
}
|
||||||
|
|
||||||
MBEDTLS_MPI_CHK( mbedtls_mpi_write_binary( secret,
|
MBEDTLS_MPI_CHK( mbedtls_mpi_write_binary( secret,
|
||||||
secret_bytes, secret_len ) );
|
secret_bytes, secret_len ) );
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue