pk_wrap: add a check for equal signature parts
This commit is contained in:
parent
b3d1b12177
commit
3f864c2457
1 changed files with 7 additions and 4 deletions
|
@ -542,10 +542,9 @@ static psa_algorithm_t translate_md_to_psa( mbedtls_md_type_t md_alg )
|
|||
static int extract_ecdsa_sig( unsigned char **p, const unsigned char *end,
|
||||
mbedtls_asn1_buf *sig )
|
||||
{
|
||||
int ret;
|
||||
size_t len_signature;
|
||||
size_t len_partial;
|
||||
int tag_type;
|
||||
int ret, tag_type;
|
||||
size_t len_signature, len_partial;
|
||||
|
||||
if( ( end - *p ) < 1 )
|
||||
{
|
||||
return( MBEDTLS_ERR_X509_INVALID_SIGNATURE +
|
||||
|
@ -590,6 +589,10 @@ static int extract_ecdsa_sig( unsigned char **p, const unsigned char *end,
|
|||
len_partial--;
|
||||
}
|
||||
|
||||
// Check if both parts are of the same size
|
||||
if( len_partial != len_signature )
|
||||
return( MBEDTLS_ERR_X509_INVALID_SIGNATURE );
|
||||
|
||||
memcpy( sig->p + len_partial, *p, len_partial );
|
||||
len_signature += len_partial;
|
||||
sig->tag = tag_type;
|
||||
|
|
Loading…
Reference in a new issue