checking mpz_export return value properly

fixes a potential DoS attack if a DH value of zero gets processed
This commit is contained in:
Martin Willi
2008-09-17 08:10:48 +00:00
parent b33c11b6c7
commit 73f6886a50
4 changed files with 32 additions and 8 deletions
@@ -93,11 +93,15 @@ static chunk_t rsaep(private_gmp_rsa_public_key_t *this, chunk_t data)
mpz_powm(c, m, this->e, this->n);
encrypted.len = this->k;
encrypted.ptr = mpz_export(NULL, NULL, 1, encrypted.len, 1, 0, c);
encrypted.len = this->k;
encrypted.ptr = mpz_export(NULL, NULL, 1, encrypted.len, 1, 0, c);
if (encrypted.ptr == NULL)
{
encrypted.len = 0;
}
mpz_clear(c);
mpz_clear(m);
mpz_clear(m);
return encrypted;
}