wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-05 18:40:49 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #9895 from embhorn/f283-287

Browse Source 
Hardening in GeneratePrivateDh186 and wc_DhImportKeyPair
This commit is contained in:
Daniel Pouzzner
2026-03-06 22:36:14 -06:00
committed by GitHub
parent d4ac953ca5 203cce48ef
commit f02f6d1d67
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
wolfcrypt/src/dh.c
+3 -2
View File
@@ -1157,8 +1157,9 @@ static int GeneratePrivateDh186(DhKey* key, WC_RNG* rng, byte* priv,
if (err == MP_OKAY)
err = mp_read_unsigned_bin(tmpX, cBuf, cSz);
if (err != MP_OKAY) {
mp_clear(tmpX);
mp_forcezero(tmpX);
mp_clear(tmpQ);
ForceZero(cBuf, cSz);
#if defined(WOLFSSL_SMALL_STACK) && !defined(WOLFSSL_NO_MALLOC)
XFREE(cBuf, key->heap, DYNAMIC_TYPE_TMP_BUFFER);
XFREE(tmpQ, key->heap, DYNAMIC_TYPE_DH);
@@ -2403,7 +2404,7 @@ int wc_DhImportKeyPair(DhKey* key, const byte* priv, word32 privSz,
}
if (havePriv) {
if (mp_read_unsigned_bin(&key->priv, priv, privSz) != MP_OKAY) {
mp_clear(&key->priv);
mp_forcezero(&key->priv);
havePriv = 0;
} else {
WOLFSSL_MSG("DH Private Key Set");