wolfssl: Reject EC keys with explicitly encoded parameters

[thirdparty/strongswan.git] / src / libstrongswan / plugins / wolfssl / wolfssl_ec_public_key.c

diff --git a/src/libstrongswan/plugins/wolfssl/wolfssl_ec_public_key.c b/src/libstrongswan/plugins/wolfssl/wolfssl_ec_public_key.c
index 97abe950b91f5f01d574d5f35a7c79e41b4be99f..58fd6edede17e90d619377bc96db669c5e20c4eb 100644 (file)
--- a/src/libstrongswan/plugins/wolfssl/wolfssl_ec_public_key.c
+++ b/src/libstrongswan/plugins/wolfssl/wolfssl_ec_public_key.c
@@ -378,7 +378,7 @@ wolfssl_ec_public_key_t *wolfssl_ec_public_key_load(key_type_t type,
 
        idx = 0;
        ret = wc_EccPublicKeyDecode(blob.ptr, &idx, &this->ec, blob.len);
-       if (ret < 0)
+       if (ret < 0 || this->ec.idx == -1)
        {
                destroy(this);
                return NULL;