generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

In EC_KEY_set_public_key_affine_coordinates include explicit check to see passed components do not exceed field order

Browse Source
This commit is contained in:
Dr. Stephen Henson 2011-11-16 13:28:11 +00:00
parent 9eca2399f1
commit 901b9b5c36
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
crypto/ec/ec_key.c
View File

@ -511,10 +511,12 @@ int EC_KEY_set_public_key_affine_coordinates(EC_KEY *key, BIGNUM *x, BIGNUM *y)
tx, ty, ctx)) tx, ty, ctx))
goto err; goto err;
} }
/* Check if retrieved coordinates match originals: if not values /* Check if retrieved coordinates match originals and are less than
* are out of range. * field order: if not values are out of range.
*/ */
if (BN_cmp(x, tx) || BN_cmp(y, ty)) if (BN_cmp(x, tx) || BN_cmp(y, ty)
|| (BN_cmp(x, &key->group->field) >= 0)
|| (BN_cmp(y, &key->group->field) >= 0))
{ {
ECerr(EC_F_EC_KEY_SET_PUBLIC_KEY_AFFINE_COORDINATES, ECerr(EC_F_EC_KEY_SET_PUBLIC_KEY_AFFINE_COORDINATES,
EC_R_COORDINATES_OUT_OF_RANGE); EC_R_COORDINATES_OUT_OF_RANGE);