From 64667a55953263a84907636b5edaffc8e037ba99 Mon Sep 17 00:00:00 2001 From: Daniel Pouzzner Date: Wed, 17 Jan 2024 13:16:00 -0600 Subject: [PATCH] src/crl.c: fix "null pointer passed as argument 2" in new XMEMCPY() call in WC_RSA_PSS path of DupCRL_Entry(), added in b140f93b17, detected by gcc 14.0.0_pre20240107 p15 with sanitizers. --- src/crl.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/crl.c b/src/crl.c index 20b2241ab..a4212949c 100644 --- a/src/crl.c +++ b/src/crl.c @@ -778,7 +778,9 @@ static CRL_Entry* DupCRL_Entry(const CRL_Entry* ent, void* heap) XMEMCPY(dupl->toBeSigned, ent->toBeSigned, dupl->tbsSz); XMEMCPY(dupl->signature, ent->signature, dupl->signatureSz); #ifdef WC_RSA_PSS - XMEMCPY(dupl->sigParams, ent->sigParams, dupl->sigParamsSz); + if (dupl->sigParamsSz > 0) { + XMEMCPY(dupl->sigParams, ent->sigParams, dupl->sigParamsSz); + } #endif } else {