wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-07 09:20:50 +02:00
Code Issues Packages Projects Releases Wiki Activity

validate hashAlgSz is within bounds before calling XMEMCPY

Browse Source
This commit is contained in:
Ruby Martin
2026-03-02 14:39:58 -07:00
parent d6c8e7bced
commit 0ef8541b73
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
wolfcrypt/src/asn.c
+3
View File
@@ -7846,6 +7846,9 @@ word32 wc_EncodeRsaPssAlgoId(int hashOID, int saltLen, byte* out, word32 outSz)
if (outSz < outerSz) {
idx = 0; goto pss_algoid_done;
}
if (hashAlgSz > RSA_PSS_ALGOID_TMPBUF_SZ) {
idx = 0; goto pss_algoid_done;
}
{
word32 idPart = (word32)SetObjectId((int)rsapssOidSz, NULL) + rsapssOidSz;