evp: check ivLen in wolfSSL_EVP_CIPHER_CTX_set_iv_length.

2026-07-06 22:10:52 +02:00 · 2026-03-10 15:27:37 -05:00
parent b02ddde4f2
commit 77b6f531fb
1 changed files with 8 additions and 3 deletions
@@ -8449,10 +8449,15 @@ void wolfSSL_EVP_init(void)
                                             int ivLen)
    {
        WOLFSSL_ENTER("wolfSSL_EVP_CIPHER_CTX_set_iv_length");
-        if (ctx)
-            ctx->ivSz= ivLen;
-        else
+        if (ctx == NULL) {
            return WOLFSSL_FAILURE;
+        }
+
+        if (ivLen < 0 || ivLen > (int) sizeof(ctx->iv)) {
+            return WOLFSSL_FAILURE;
+        }
+
+        ctx->ivSz = ivLen;

        return WOLFSSL_SUCCESS;
    }