mirror of
https://github.com/yuzu-emu/mbedtls.git
synced 2024-10-18 13:11:18 +00:00
6260b70717
Fix a buffer overflow in mbedtls_mpi_sub_abs() when calculating |A| - |B| where |B| is larger than |A| and has more limbs (so the function should return MBEDTLS_ERR_MPI_NEGATIVE_VALUE). Fix #4042 Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
8 lines
423 B
Plaintext
8 lines
423 B
Plaintext
Security
|
|
* Fix a buffer overflow in mbedtls_mpi_sub_abs() when calculating
|
|
|A| - |B| where |B| is larger than |A| and has more limbs (so the
|
|
function should return MBEDTLS_ERR_MPI_NEGATIVE_VALUE). Only
|
|
applications calling mbedtls_mpi_sub_abs() directly are affected:
|
|
all calls inside the library were safe since this function is
|
|
only called with |A| >= |B|. Reported by Guido Vranken in #4042.
|