check buffer is larger enough before overwriting

This commit is contained in:
Dr. Stephen Henson 2011-04-06 18:07:02 +00:00
parent 3622d3743e
commit 8d22673a62

View File

@ -168,8 +168,7 @@ int fbytes(unsigned char *buf, int num)
return 0;
}
fbytes_counter ++;
ret = BN_bn2bin(tmp, buf);
if (ret == 0 || ret != num)
if (num != BN_num_bytes(tmp) || !BN_bn2bin(tmp, buf))
ret = 0;
else
ret = 1;