check buffer is larger enough before overwriting

This commit is contained in:
Dr. Stephen Henson
2011-04-06 18:07:12 +00:00
parent 7116a41129
commit 6d12b1f82b

View File

@@ -168,8 +168,7 @@ int fbytes(unsigned char *buf, int num)
return 0;
}
fbytes_counter ++;
ret = BN_bn2bin(tmp, buf);
if (ret == 0 || ret != num)
if (num != BN_num_bytes(tmp) || !BN_bn2bin(tmp, buf))
ret = 0;
else
ret = 1;