check buffer is larger enough before overwriting

acd410dc · Dr. Stephen Henson · 161cc82d · acd410dc
隐藏空白更改
内联并排

Showing with 2 addition and 3 deletion

crypto/ecdsa/ecdsatest.c crypto/ecdsa/ecdsatest.c +2 -3

未找到文件。
--- a/crypto/ecdsa/ecdsatest.c
+++ b/crypto/ecdsa/ecdsatest.c
@@ -168,10 +168,9 @@ int fbytes(unsigned char *buf, int num)
 		return 0;
 		}
 	fbytes_counter ++;
-	ret = BN_bn2bin(tmp, buf);	
-	if (ret == 0 || ret != num)
+	if (num != BN_num_bytes(tmp) || !BN_bn2bin(tmp, buf))
 		ret = 0;
-	else
+	else 
 		ret = 1;
 	if (tmp)
 		BN_free(tmp);