mirrors/wolfssl
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Static RSA length check

Browse Source 
Better length check on decrypted pre-master secret length.
This commit is contained in:
Sean Parkinson 2023-09-26 12:50:26 +10:00
parent 60f30e994d
commit 9acba6ee2d
2 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/internal.c
View File

@ -38222,6 +38222,7 @@ static int DefTicketEncCb(WOLFSSL* ssl, byte key_name[WOLFSSL_TICKET_NAME_SZ],
case rsa_kea:
{
RsaKey* key = (RsaKey*)ssl->hsKey;
int lenErrMask;
ret = RsaDec(ssl,
input + args->idx,
@ -38247,7 +38248,9 @@ static int DefTicketEncCb(WOLFSSL* ssl, byte key_name[WOLFSSL_TICKET_NAME_SZ],
if (ret == BAD_FUNC_ARG)
goto exit_dcke;
args->lastErr = ret - (SECRET_LEN - args->sigSz);
lenErrMask = 0 - (SECRET_LEN != args->sigSz);
args->lastErr = (ret & (~lenErrMask)) |
(RSA_PAD_E & lenErrMask);
ret = 0;
break;
} /* rsa_kea */

2
src/ssl.c
View File

@ -32840,7 +32840,7 @@ int wolfSSL_set_alpn_protos(WOLFSSL* ssl,
const unsigned char* p, unsigned int p_len)
{
WOLFSSL_BIO* bio;
char* pt;
char* pt = NULL;
unsigned int sz;
unsigned int idx = 0;