mirror of
https://github.com/yuzu-emu/mbedtls.git
synced 2024-10-19 06:31:20 +00:00
b6d5693be2
The function `pk_hashlen_helper` exists to ensure a valid hash_len is used in pk_verify and pk_sign functions. This function has been used to adjust to the corrsponding hash_len if the user passes in 0 for the hash_len argument based on the md algorithm given. If the user does not pass in 0 as the hash_len, then it is not adjusted. This is problematic if the user gives a hash_len and hash buffer that is less than the associated length of the md algorithm. This error would go unchecked and eventually lead to buffer overread when given to specific pk_sign/verify functions, since they both ignore the hash_len argument if md_alg is not MBEDTLS_MD_NONE. This commit, adds a conditional to `pk_hashlen_helper` so that an error is thrown if the user specifies a hash_length (not 0) and it is not equal to the expected for the associated message digest algorithm. This aligns better with the api documentation where it states "If hash_len is 0, then the length associated with md_alg is used instead, or an error returned if it is invalid" Signed-off-by: Nick Child <nick.child@ibm.com> Signed-off-by: Nayna Jain <nayna@linux.ibm.com> |
||
|---|---|---|
| .. | ||
| 00README.md | ||
| add-missing-parenthesis.txt | ||
| aescrypt2.txt | ||
| allow_alt_cmac_without_des.txt | ||
| aria-alt.txt | ||
| bugfix_PR3616.txt | ||
| ciphersuite-sha1-sha384-guard.txt | ||
| ciphersuite-sha384-guard.txt | ||
| dhm_min_bitlen.txt | ||
| dtls_sample_use_read_timeout.txt | ||
| ecp-window-size.txt | ||
| ensure_hash_len_is_valid.txt | ||
| fix-invalid-id-error-code.txt | ||
| fix-mingw-build.txt | ||
| fix-pk-parse-key-error-code.txt | ||
| fix-printf-specifiers.txt | ||
| fix-ssl-cf-hmac-alt.txt | ||
| fix_memsan_build_clang11.txt | ||
| fix_return_type_for_invalid_crypto_key.txt | ||
| host_test-int32.txt | ||
| issue1792.txt | ||
| issue4176.txt | ||
| make-generate-tests-python.txt | ||
| mbed-can-do-timing.txt | ||
| mbedtls_debug_print_mpi.txt | ||
| mpi_exp_mod-zero.txt | ||
| mpi_gcd-0.txt | ||
| mpi_random.txt | ||
| mpi_read_negative_zero.txt | ||
| mpi_read_zero.txt | ||
| one-shot-mac.txt | ||
| pkcs1_v21_sign_ext.txt | ||
| posix-define.txt | ||
| psa-aead-output-size-macros-1.0.txt | ||
| psa-builtin-keys-implementation.txt | ||
| psa-read-only-keys.txt | ||
| psa-rsa-verify-alt-fix.txt | ||
| psa-without-genprime-fix.txt | ||
| psa_key_derivation-bad_workflow.txt | ||
| psa_sign_message.txt | ||
| random-range.txt | ||
| remove-config-psa-crypto.txt | ||
| session-cache.txt | ||
| spm_build.txt | ||
| undefined_reference_without_psa.txt | ||
| winsock.txt | ||