yuzu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2025-03-23 02:45:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add PK tests to avoid hashlen overflow for RSA

Browse source
This commit is contained in:
Andres AG 2017-01-20 11:52:40 +00:00
parent c71b7eb0e7
commit 562bbb6f6a
2 changed files with 38 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
tests/suites/test_suite_pk.data
View file

@ -150,3 +150,6 @@ Check pair #5 (RSA vs EC)
depends_on:POLARSSL_ECP_C:POLARSSL_ECP_DP_SECP256R1_ENABLED:POLARSSL_RSA_C
pk_check_pair:"data_files/ec_256_pub.pem":"data_files/server1.key":POLARSSL_ERR_PK_TYPE_MISMATCH
RSA hash_len overflow (size_t vs unsigned int)
depends_on:POLARSSL_RSA_C:POLARSSL_HAVE_INT64
pk_rsa_overflow:

35
tests/suites/test_suite_pk.function
View file

@ -5,6 +5,9 @@
#include "polarssl/ecp.h"
#include "polarssl/rsa.h"
/* For detecting 64-bit compilation */
#include "polarssl/bignum.h"
static int rnd_std_rand( void *rng_state, unsigned char *output, size_t len );
#define RSA_KEY_SIZE 512
@ -414,6 +417,33 @@ exit:
}
/* END_CASE */
/* BEGIN_CASE depends_on:POLARSSL_RSA_C:POLARSSL_HAVE_INT64 */
void pk_rsa_overflow( )
{
pk_context pk;
size_t hash_len = (size_t)-1;
pk_init( &pk );
TEST_ASSERT( pk_init_ctx( &pk, pk_info_from_type( POLARSSL_PK_RSA ) ) == 0 );
#if defined(POLARSSL_PKCS1_V21)
TEST_ASSERT( pk_verify_ext( POLARSSL_PK_RSASSA_PSS, NULL, &pk,
POLARSSL_MD_NONE, NULL, hash_len, NULL, 0 ) ==
POLARSSL_ERR_PK_BAD_INPUT_DATA );
#endif /* POLARSSL_PKCS1_V21 */
TEST_ASSERT( pk_verify( &pk, POLARSSL_MD_NONE, NULL, hash_len,
NULL, 0 ) == POLARSSL_ERR_PK_BAD_INPUT_DATA );
TEST_ASSERT( pk_sign( &pk, POLARSSL_MD_NONE, NULL, hash_len, NULL, 0,
rnd_std_rand, NULL ) == POLARSSL_ERR_PK_BAD_INPUT_DATA );
exit:
pk_free( &pk );
}
/* END_CASE */
/* BEGIN_CASE depends_on:POLARSSL_RSA_C */
void pk_rsa_alt( )
{
@ -461,6 +491,11 @@ void pk_rsa_alt( )
/* Test signature */
TEST_ASSERT( pk_sign( &alt, POLARSSL_MD_NONE, hash, sizeof hash,
sig, &sig_len, rnd_std_rand, NULL ) == 0 );
#if defined(POLARSSL_HAVE_INT64)
TEST_ASSERT( pk_sign( &alt, POLARSSL_MD_NONE, hash, (size_t)-1,
NULL, NULL, rnd_std_rand, NULL ) ==
POLARSSL_ERR_PK_BAD_INPUT_DATA );
#endif /* POLARSSL_HAVE_INT64 */
TEST_ASSERT( sig_len == RSA_KEY_LEN );
TEST_ASSERT( pk_verify( &rsa, POLARSSL_MD_NONE,
hash, sizeof hash, sig, sig_len ) == 0 );