wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-01-26 23:12:19 +01:00
Code Issues Packages Projects Releases Wiki Activity

avoid attempt of key decode and free buffer if incorrect recipient found

Browse Source
This commit is contained in:
JacobBarthelmeh
2025-10-06 10:48:59 -06:00
parent fca3028395
commit 7128932eff
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
wolfcrypt/src/pkcs7.c
View File

@@ -10488,6 +10488,14 @@ static int wc_PKCS7_DecryptKtri(wc_PKCS7* pkcs7, byte* in, word32 inSz,
XMEMCPY(encryptedKey, &pkiMsg[*idx], (word32)encryptedKeySz);
*idx += (word32)encryptedKeySz;
/* If this is not the correct recipient then do not try to decode
* the encrypted key */
if (*recipFound == 0) {
XFREE(encryptedKey, pkcs7->heap, DYNAMIC_TYPE_WOLF_BIGINT);
ret = PKCS7_RECIP_E;
break;
}
/* load private key */
#ifdef WOLFSSL_SMALL_STACK
privKey = (RsaKey*)XMALLOC(sizeof(RsaKey), pkcs7->heap,