feedc0de/wolfssl
1
0
Fork 0
forked from wolfSSL/wolfssl
Code Pull Requests Activity

MP: integer OOB write fix

Browse Source 
mp_to_unsigned_bin_len() now checks length passed in is greater than or
equal length to write.
This commit is contained in:
Sean Parkinson
2020-08-24 22:48:52 +10:00
parent e30361e186
commit 4f44df96dc
1 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
wolfcrypt/src/integer.c
View File

@@ -321,9 +321,14 @@ int mp_to_unsigned_bin_len(mp_int * a, unsigned char *b, int c)
len = mp_unsigned_bin_size(a);
if (len > c) {
return MP_VAL;
}
/* pad front w/ zeros to match length */
for (i = 0; i < c - len; i++)
b[i] = 0x00;
for (i = 0; i < c - len; i++) {
b[i] = 0x00;
}
return mp_to_unsigned_bin(a, b + i);
}