upper bounds check for DSA signature

2026-07-05 16:50:48 +02:00 · 2026-03-25 11:46:16 -06:00
parent d4b25d0ebc
commit 75e6406cd3
1 changed files with 4 additions and 0 deletions
@@ -16216,6 +16216,10 @@ int ConfirmSignature(SignatureCtx* sigCtx,
                        WOLFSSL_MSG("Verify Signature is too small");
                        ERROR_OUT(BUFFER_E, exit_cs);
                    }
+                    else if (sigSz > MAX_ENCODED_SIG_SZ) {
+                        WOLFSSL_MSG("Verify Signature is too big");
+                        ERROR_OUT(BUFFER_E, exit_cs);
+                    }
                #ifndef WOLFSSL_NO_MALLOC
                    sigCtx->key.dsa = (DsaKey*)XMALLOC(sizeof(DsaKey),
                                                sigCtx->heap, DYNAMIC_TYPE_DSA);