denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Check rng return value when generating DH secrets and primes in gmp plugin

Browse Source
This commit is contained in:
Tobias Brunner
2012-07-16 14:53:35 +02:00
committed by Martin Willi
parent e93bb353d5
commit 5025135f70
3 changed files with 19 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/plugins/gmp/gmp_rsa_public_key.c
+6 -10
View File
@@ -314,7 +314,7 @@ METHOD(public_key_t, encrypt_, bool,
{
chunk_t em;
u_char *pos;
int padding, i;
int padding;
rng_t *rng;
if (scheme != ENCRYPT_RSA_PKCS1)
@@ -348,16 +348,12 @@ METHOD(public_key_t, encrypt_, bool,
*pos++ = 0x02;
/* fill with pseudo random octets */
rng->get_bytes(rng, padding, pos);
/* replace zero-valued random octets */
for (i = 0; i < padding; i++)
if (!rng_get_bytes_not_zero(rng, padding, pos, TRUE))
{
while (*pos == 0)
{
rng->get_bytes(rng, 1, pos);
}
pos++;
DBG1(DBG_LIB, "failed to allocate padding");
chunk_clear(&em);
rng->destroy(rng);
return FALSE;
}
rng->destroy(rng);