Fix boolean return value if an empty RSA signature is detected in gmp plugin

Fixes CVE-2012-2388.

diff --git a/src/libstrongswan/plugins/gmp/gmp_rsa_public_key.c b/src/libstrongswan/plugins/gmp/gmp_rsa_public_key.c
index a7ba80138af8cb54b044c5451793a95394248afd..898892f5b87d1f9e0bbdc4adaa67109388df678d 100644 (file)
--- a/src/libstrongswan/plugins/gmp/gmp_rsa_public_key.c
+++ b/src/libstrongswan/plugins/gmp/gmp_rsa_public_key.c
@@ -137,7 +137,7 @@ static bool verify_emsa_pkcs1_signature(private_gmp_rsa_public_key_t *this,
 
        if (signature.len == 0 || signature.len > this->k)
        {
-               return INVALID_ARG;
+               return FALSE;
        }
 
        /* unpack signature */