add sanity size check to iv fill in case block size is bad

2014-12-01 14:23:10 -08:00 · 2014-12-01 14:23:10 -08:00 · 295e65ca02
commit 295e65ca02
parent 4954043def
1 changed files with 3 additions and 0 deletions
--- a/src/internal.c
+++ b/src/internal.c
@ -7166,6 +7166,9 @@ static int BuildMessage(CYASSL* ssl, byte* output, int outSz,
            ivSz = blockSz;
            sz  += ivSz;

+            if (ivSz > (word32)sizeof(iv))
+                return BUFFER_E;
+
            ret = RNG_GenerateBlock(ssl->rng, iv, ivSz);
            if (ret != 0)
                return ret;