WolfSSL
/
wolfssh
mirror of https://github.com/wolfSSL/wolfssh.git
1
0
Fork 0
Code Issues Releases Wiki Activity

fix check on RSA import size

pull/379/head
Jacob Barthelmeh 2021-12-01 15:54:26 -07:00
parent f51fb9c535
commit 7dd9d1fa2e
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/internal.c
View File

@ -3164,14 +3164,14 @@ static int DoKexDhReply(WOLFSSH* ssh, byte* buf, word32 len, word32* idx)
if (ret == WS_SUCCESS) { if (ret == WS_SUCCESS) {
pubKeyIdx += scratch; pubKeyIdx += scratch;
ret = GetUint32(&eSz, pubKey, pubKeySz, &pubKeyIdx); ret = GetUint32(&eSz, pubKey, pubKeySz, &pubKeyIdx);
if (ret == WS_SUCCESS && eSz > len - pubKeyIdx) if (ret == WS_SUCCESS && eSz > pubKeySz - pubKeyIdx)
ret = WS_BUFFER_E; ret = WS_BUFFER_E;
} }
if (ret == WS_SUCCESS) { if (ret == WS_SUCCESS) {
e = pubKey + pubKeyIdx; e = pubKey + pubKeyIdx;
pubKeyIdx += eSz; pubKeyIdx += eSz;
ret = GetUint32(&nSz, pubKey, pubKeySz, &pubKeyIdx); ret = GetUint32(&nSz, pubKey, pubKeySz, &pubKeyIdx);
if (ret == WS_SUCCESS && nSz > len - pubKeyIdx) if (ret == WS_SUCCESS && nSz > pubKeySz - pubKeyIdx)
ret = WS_BUFFER_E; ret = WS_BUFFER_E;
} }
if (ret == WS_SUCCESS) { if (ret == WS_SUCCESS) {