grub-core/lib/pbkdf2.c (grub_crypto_pbkdf2): Check that hash len is not 0.

diff --git a/ChangeLog b/ChangeLog
index 87c4658431eacd9c7461c7f80442b43e2e9ffac2..a708ca28a2526e044c4a7cde3ab05dded6343643 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+2015-01-20  Vladimir Serbinenko  <phcoder@gmail.com>
+
+       * grub-core/lib/pbkdf2.c (grub_crypto_pbkdf2): Check that hash len is not 0.
+
 2015-01-20  Vladimir Serbinenko  <phcoder@gmail.com>
 
        * grub-core/osdep/linux/blocklist.c (grub_install_get_blocklist): Check

diff --git a/grub-core/lib/pbkdf2.c b/grub-core/lib/pbkdf2.c
index 2fbaa95e8dc78a8939a9783433f4dc7cf9add050..01cee3951733e1f6bd9fa299dd5e9b14517fe3e3 100644 (file)
--- a/grub-core/lib/pbkdf2.c
+++ b/grub-core/lib/pbkdf2.c
@@ -52,7 +52,7 @@ grub_crypto_pbkdf2 (const struct gcry_md_spec *md,
   grub_uint8_t *tmp;
   grub_size_t tmplen = Slen + 4;
 
-  if (md->mdlen > GRUB_CRYPTO_MAX_MDLEN)
+  if (md->mdlen > GRUB_CRYPTO_MAX_MDLEN || md->mdlen == 0)
     return GPG_ERR_INV_ARG;
 
   if (c == 0)