j3d1/bearssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fixed buffer overflow, and also NULL pointer dereference, in ECDSA signature handling.

Browse source
This commit is contained in:
Thomas Pornin 2016-11-21 20:11:21 +01:00
parent ccd43452e6
commit e8ccee8bcd
5 changed files with 80 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

7
src/ec/ecdsa_i31_sign_raw.c
View file

@ -50,6 +50,13 @@ br_ecdsa_i31_sign_raw(const br_ec_impl *impl,
uint32_t n0i, ctl;
br_hmac_drbg_context drbg;
/*
* If the curve is not supported, then exit with an error.
*/
if (((impl->supported_curves >> sk->curve) & 1) == 0) {
return 0;
}
/*
* Get the curve parameters (generator and order).
*/