Merge pull request #7278 from JacobBarthelmeh/pkcs7-validate

add guard around public key validation on import
This commit is contained in:
Chris Conlon
2024-05-06 13:51:29 -06:00
committed by GitHub

View File

@ -1041,9 +1041,11 @@ static int wc_PKCS7_CheckPublicKeyDer(PKCS7* pkcs7, int keyOID,
/* Try to decode public key and check with wc_ecc_check_key() */ /* Try to decode public key and check with wc_ecc_check_key() */
ret = wc_EccPublicKeyDecode(key, &scratch, ecc, keySz); ret = wc_EccPublicKeyDecode(key, &scratch, ecc, keySz);
#if defined(WOLFSSL_VALIDATE_ECC_IMPORT)
if (ret == 0) { if (ret == 0) {
ret = wc_ecc_check_key(ecc); ret = wc_ecc_check_key(ecc);
} }
#endif
wc_ecc_free(ecc); wc_ecc_free(ecc);
break; break;