WolfSSL
/
wolfTPM
mirror of https://github.com/wolfSSL/wolfTPM.git
1
0
Fork 0
Code Issues Releases Wiki Activity

6749 - Bound EccZToBuffer source size against z->buffer to prevent OOB read

pull/547/head
aidan garske 2026-07-07 14:59:35 -07:00
parent eef373d759
commit 41ba3bb7f6
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/tpm2_wrap.c
View File

@ -6335,10 +6335,10 @@ int wolfTPM2_EccZToBuffer(byte* out, int* outSz, const TPM2B_ECC_PARAMETER* z)
if (out == NULL || outSz == NULL || z == NULL) {
return BAD_FUNC_ARG;
}
if ((int)z->size > *outSz) {
if (z->size > (UINT16)sizeof(z->buffer) || (int)z->size > *outSz) {
return BUFFER_E;
}
*outSz = z->size;
*outSz = (int)z->size;
XMEMCPY(out, z->buffer, z->size);
return TPM_RC_SUCCESS;
}