feedc0de/wolfssl
1
0
Fork 0
forked from wolfSSL/wolfssl
Code Pull Requests Activity

sanity check on padlen with pkcs7 decode

Browse Source
This commit is contained in:
Jacob Barthelmeh
2019-03-13 10:00:43 -06:00
parent 0d48a4a1a7
commit 06e5f8c39b
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
wolfcrypt/src/pkcs7.c
View File

@ -9354,6 +9354,12 @@ WOLFSSL_API int wc_PKCS7_DecodeEnvelopedData(PKCS7* pkcs7, byte* in,
padLen = encryptedContent[encryptedContentSz-1]; padLen = encryptedContent[encryptedContentSz-1];
/* copy plaintext to output */ /* copy plaintext to output */
if (padLen > encryptedContentSz ||
(word32)(encryptedContentSz - padLen) > outputSz) {
XFREE(encryptedContent, pkcs7->heap, DYNAMIC_TYPE_PKCS7);
ret = BUFFER_E;
break;
}
XMEMCPY(output, encryptedContent, encryptedContentSz - padLen); XMEMCPY(output, encryptedContent, encryptedContentSz - padLen);
/* free memory, zero out keys */ /* free memory, zero out keys */