make sure we don't write to seed[-1]

ee8aa821 · Ulf Möller · 2b49dd1e · ee8aa821
隐藏空白更改
内联并排

Showing with 5 addition and 0 deletion

crypto/rsa/rsa_oaep.c crypto/rsa/rsa_oaep.c +5 -0

未找到文件。
--- a/crypto/rsa/rsa_oaep.c
+++ b/crypto/rsa/rsa_oaep.c
@@ -111,6 +111,11 @@ int RSA_padding_check_PKCS1_OAEP(unsigned char *to, int tlen,
 	}

    lzero = num - flen;
+    if (lzero < 0)
+    {
+    RSAerr(RSA_F_RSA_PADDING_CHECK_PKCS1_OAEP, RSA_R_OAEP_DECODING_ERROR);
+    return (-1);
+    }
    maskeddb = from - lzero + SHA_DIGEST_LENGTH;
    
    MGF1(seed, SHA_DIGEST_LENGTH, maskeddb, dblen);