yuzu-emu/mbedtls
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Feedback from Arm: guarantee that output_length <= output_size even on error, to reduce the risk that a missing error check

Browse source 
escalates into a buffer overflow in the application code

Signed-off-by: Stephan Koch <koch@oberon.ch>
This commit is contained in:
Stephan Koch 2023-02-22 13:39:21 +01:00
parent 10c0f770ce
commit 5819d2c141
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
tests/suites/test_suite_psa_crypto.function
View file

@ -7855,6 +7855,8 @@ void asymmetric_encrypt(int key_type_arg,
TEST_EQUAL(actual_status, expected_status); TEST_EQUAL(actual_status, expected_status);
if (actual_status == PSA_SUCCESS) { if (actual_status == PSA_SUCCESS) {
TEST_EQUAL(output_length, expected_output_length); TEST_EQUAL(output_length, expected_output_length);
} else {
TEST_LE_U(output_length, output_size);
} }
/* If the label is empty, the test framework puts a non-null pointer /* If the label is empty, the test framework puts a non-null pointer
@ -7872,6 +7874,8 @@ void asymmetric_encrypt(int key_type_arg,
TEST_EQUAL(actual_status, expected_status); TEST_EQUAL(actual_status, expected_status);
if (actual_status == PSA_SUCCESS) { if (actual_status == PSA_SUCCESS) {
TEST_EQUAL(output_length, expected_output_length); TEST_EQUAL(output_length, expected_output_length);
} else {
TEST_LE_U(output_length, output_size);
} }
} }