wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-08 05:20:48 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix wc_MXC_TPU_SHA_Copy to deep copy src msg buffer instead of freed dst pointer

Browse Source
This commit is contained in:
night1rider
2026-03-20 16:11:09 -06:00
parent 5b3750c39f
commit 92e3647a32
1 changed files with 8 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
wolfcrypt/src/port/maxim/max3266x.c
+8 -5
View File
@@ -808,23 +808,26 @@ int wc_MXC_TPU_SHA_Copy(void* src, void* dst, word32 ctxSz,
byte** dstMsg, word32* dstUsed, word32* dstLen,
void* dstHeap, void* srcHeap)
{
byte* srcBuf;
byte* srcBuf = NULL;
if (src == NULL || dst == NULL || dstMsg == NULL ||
dstUsed == NULL || dstLen == NULL || ctxSz == 0) {
return BAD_FUNC_ARG;
}
srcBuf = *dstMsg;
/* Free existing dst msg buffer using dst's original heap */
wc_MXC_TPU_SHA_Free(dstMsg, dstUsed, dstLen, dstHeap);
/* Shallow copy the full context struct */
XMEMCPY(dst, src, ctxSz);
/* Deep copy src msg buffer if present, allocate using src's heap */
if (srcBuf != NULL) {
/* Deep copy src msg buffer if present. Since dstMsg points into the dst
* struct, the XMEMCPY above overwrites it with the src's msg pointer.
* Save that pointer, allocate a new buffer for dst, and copy the data.
* Do NOT move srcBuf assignment before XMEMCPY - it must capture the
* src msg pointer that lands in *dstMsg after the shallow copy. */
if (*dstMsg != NULL) {
srcBuf = *dstMsg;
*dstMsg = (byte*)XMALLOC(*dstLen, srcHeap, DYNAMIC_TYPE_TMP_BUFFER);
if (*dstMsg == NULL) {
return MEMORY_E;