]> git.ipfire.org Git - thirdparty/openssl.git/commit
signature/dsa_sig.c: Add checks for the EVP_MD_get_size()
authorJiasheng Jiang <jiasheng@purdue.edu>
Fri, 22 Mar 2024 22:12:50 +0000 (22:12 +0000)
committerTomas Mraz <tomas@openssl.org>
Tue, 9 Apr 2024 18:45:26 +0000 (20:45 +0200)
commitf4174b6db41650363e41af42e82de9cc7ef09a5e
treeae685045780cabb0cc4a0e9b29c3bcced5a72990
parentdf0ee35b53a6cde959c119a165814d88e4492bb1
signature/dsa_sig.c: Add checks for the EVP_MD_get_size()

Add checks for the EVP_MD_get_size() to avoid integer overflow and then explicitly cast from int to size_t.

Fixes: 45a845e40b ("Add EVP_DigestSign/EVP_DigestVerify support for DSA")
Signed-off-by: Jiasheng Jiang <jiasheng@purdue.edu>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23948)
providers/implementations/signature/dsa_sig.c