]> git.ipfire.org Git - thirdparty/openssl.git/commit
signature/rsa_sig.c: Add checks for the EVP_MD_get_size()
authorJiasheng Jiang <jiasheng@purdue.edu>
Fri, 22 Mar 2024 22:22:23 +0000 (22:22 +0000)
committerNeil Horman <nhorman@openssl.org>
Mon, 1 Apr 2024 18:11:52 +0000 (14:11 -0400)
commit6c0f154750a3380cced8ddab44d7ad100b6ab984
tree0971752ec80c75d746fdf203d98fa0a48dbb2095
parent7638f4016a9438dccaf183a3ae7353d363dfc25a
signature/rsa_sig.c: Add checks for the EVP_MD_get_size()

Add checks for the EVP_MD_get_size() to avoid integer overflow and then explicitly cast from int to size_t.

Fixes: 6f4b766315 ("PROV: add RSA signature implementation")
Signed-off-by: Jiasheng Jiang <jiasheng@purdue.edu>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Todd Short <todd.short@me.com>
Reviewed-by: Neil Horman <nhorman@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23949)
providers/implementations/signature/rsa_sig.c