yuzu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-12-24 16:25:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

Included test for integer underflow.

Browse source
This commit is contained in:
Janos Follath 2016-02-09 14:51:35 +00:00 committed by Simon Butcher
parent 33857f4c3d
commit d886c4a419
1 changed files with 6 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
library/rsa.c
View file

@ -710,8 +710,12 @@ int rsa_rsaes_oaep_decrypt( rsa_context *ctx,
*/
hlen = md_get_size( md_info );
md_init( &md_ctx );
md_init_ctx( &md_ctx, md_info );
// checking for integer underflow
if( 2 * hlen + 2 > ilen )
return( POLARSSL_ERR_RSA_BAD_INPUT_DATA );
mbedtls_md_init( &md_ctx );
mbedtls_md_setup( &md_ctx, md_info, 0 );
/* Generate lHash */
md( md_info, label, label_len, lhash );