From 7c600e3ebcb0eda0447850972c858f0d6e76aeba Mon Sep 17 00:00:00 2001 From: Guido Vranken Date: Sun, 20 Jun 2021 22:29:20 +0200 Subject: [PATCH] In wc_ecc_verify_hash_ex, return if ALLOC_CURVE_SPECS() fails This prevents a NULL pointer dereference later in the function. --- wolfcrypt/src/ecc.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/wolfcrypt/src/ecc.c b/wolfcrypt/src/ecc.c index 7f34a6d95..9a768fc48 100644 --- a/wolfcrypt/src/ecc.c +++ b/wolfcrypt/src/ecc.c @@ -7108,6 +7108,9 @@ int wc_ecc_verify_hash_ex(mp_int *r, mp_int *s, const byte* hash, #if !defined(WOLFSSL_SP_MATH) || defined(FREESCALE_LTC_ECC) ALLOC_CURVE_SPECS(ECC_CURVE_FIELD_COUNT, err); + if (err != 0) { + return err; + } #if defined(WOLFSSL_ASYNC_CRYPT) && defined(HAVE_CAVIUM_V) err = wc_ecc_alloc_mpint(key, &key->e);