diff --git a/ChangeLog b/ChangeLog index 474b4feac..5c1a022a4 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,6 +1,10 @@ PolarSSL ChangeLog = Version 1.1.2 released on 2012-04-20 +Bugfix + * Fixed handling error in mpi_cmp_mpi() on longer B values (found by + Hui Dong) + Security * Fixed potential memory corruption on miscrafted client messages (found by Frama-C team at CEA LIST) diff --git a/library/bignum.c b/library/bignum.c index a74476711..e2cc06f24 100644 --- a/library/bignum.c +++ b/library/bignum.c @@ -687,7 +687,7 @@ int mpi_cmp_mpi( const mpi *X, const mpi *Y ) return( 0 ); if( i > j ) return( X->s ); - if( j > i ) return( -X->s ); + if( j > i ) return( -Y->s ); if( X->s > 0 && Y->s < 0 ) return( 1 ); if( Y->s > 0 && X->s < 0 ) return( -1 );