Merge pull request #3009 from embhorn/zd10358

Fix OOB access in RsaUnPad
This commit is contained in:
toddouska
2020-06-01 09:29:10 -07:00
committed by GitHub

View File

@ -1596,7 +1596,7 @@ static int RsaUnPad(const byte *pkcsBlock, unsigned int pkcsBlockLen,
byte invalid = 0;
#endif
if (output == NULL || pkcsBlockLen == 0 || pkcsBlockLen > 0xFFFF) {
if (output == NULL || pkcsBlockLen < 2 || pkcsBlockLen > 0xFFFF) {
return BAD_FUNC_ARG;
}