wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2025-07-30 10:47:28 +02:00
Code Issues Packages Projects Releases Wiki Activity

wolfcrypt: wc_ecc_cmp_param: check string len before strncmp

Browse Source 
also return -1 on param mismatch.
This commit is contained in:
Marco Oliverio
2024-03-26 14:58:35 +01:00
parent 8970ff4c34
commit 0a03940f5a
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
wolfcrypt/src/ecc.c
View File

@ -4279,8 +4279,11 @@ static int wc_ecc_cmp_param(const char* curveParam,
if (param == NULL || curveParam == NULL)
return BAD_FUNC_ARG;
if (encType == WC_TYPE_HEX_STR)
return XSTRNCMP(curveParam, (char*) param, paramSz);
if (encType == WC_TYPE_HEX_STR) {
if ((word32)XSTRLEN(curveParam) != paramSz)
return -1;
return (XSTRNCMP(curveParam, (char*) param, paramSz) == 0) ? 0 : -1;
}
#ifdef WOLFSSL_SMALL_STACK
a = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);