From: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date: Tue, 6 Jun 2017 09:47:09 +0000 (+0200)
Subject: privkey_sign_and_hash_data: added sanity check on param validity
X-Git-Tag: gnutls_3_6_0~304
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=10e73e6033fadde97fbcd50f03075c4f92ab0f11;p=thirdparty%2Fgnutls.git

privkey_sign_and_hash_data: added sanity check on param validity

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
---

diff --git a/lib/privkey.c b/lib/privkey.c
index 05fd8b362d..51100f9812 100644
--- a/lib/privkey.c
+++ b/lib/privkey.c
@@ -1131,6 +1131,9 @@ privkey_sign_and_hash_data(gnutls_privkey_t signer,
 	gnutls_datum_t digest;
 	const mac_entry_st *me;
 
+	if (gnutls_pk_to_sign(params->pk, params->dig) == GNUTLS_SIGN_UNKNOWN)
+		return gnutls_assert_val(GNUTLS_E_INVALID_REQUEST);
+
 	if (_gnutls_pk_is_not_prehashed(signer->pk_algorithm))
 		return privkey_sign_raw_data(signer, data, signature, params);