Fix boolean return value if an empty RSA signature is detected in gmp plugin
Fixes CVE-2012-2388.
This commit is contained in:
committed by
Tobias Brunner
parent
77e4282643
commit
060b508e0e
@@ -137,7 +137,7 @@ static bool verify_emsa_pkcs1_signature(private_gmp_rsa_public_key_t *this,
|
|||||||
|
|
||||||
if (signature.len == 0 || signature.len > this->k)
|
if (signature.len == 0 || signature.len > this->k)
|
||||||
{
|
{
|
||||||
return INVALID_ARG;
|
return FALSE;
|
||||||
}
|
}
|
||||||
|
|
||||||
/* unpack signature */
|
/* unpack signature */
|
||||||
|
|||||||
Reference in New Issue
Block a user