mirror of
https://github.com/wolfSSL/wolfssl.git
synced 2025-07-30 18:57:27 +02:00
Merge pull request #7278 from JacobBarthelmeh/pkcs7-validate
add guard around public key validation on import
This commit is contained in:
@ -1041,9 +1041,11 @@ static int wc_PKCS7_CheckPublicKeyDer(PKCS7* pkcs7, int keyOID,
|
|||||||
|
|
||||||
/* Try to decode public key and check with wc_ecc_check_key() */
|
/* Try to decode public key and check with wc_ecc_check_key() */
|
||||||
ret = wc_EccPublicKeyDecode(key, &scratch, ecc, keySz);
|
ret = wc_EccPublicKeyDecode(key, &scratch, ecc, keySz);
|
||||||
|
#if defined(WOLFSSL_VALIDATE_ECC_IMPORT)
|
||||||
if (ret == 0) {
|
if (ret == 0) {
|
||||||
ret = wc_ecc_check_key(ecc);
|
ret = wc_ecc_check_key(ecc);
|
||||||
}
|
}
|
||||||
|
#endif
|
||||||
wc_ecc_free(ecc);
|
wc_ecc_free(ecc);
|
||||||
|
|
||||||
break;
|
break;
|
||||||
|
Reference in New Issue
Block a user