commit 9daf0d0651d6346f6f21b6bce9797c626c88f24f
author Paul Bakker <p.j.bakker@polarssl.org> Tue Nov 13 12:13:27 2012 +0000
committer Paul Bakker <p.j.bakker@polarssl.org> Tue Nov 13 12:13:27 2012 +0000
tree b5d4aef1b31cea2f435f4a0798933529c897720c
parent 96c4ed8134afc4976606238b995b3f34f9ce1b61

 - Added max length check for rsa_pkcs1_sign with PKCS#1 v2.1

library/rsa.c

diff --git a/library/rsa.c b/library/rsa.c
index 191bfe8..637c23a 100644
--- a/library/rsa.c
+++ b/library/rsa.c
@@ -794,6 +794,9 @@
             hlen = md_get_size( md_info );
             slen = hlen;
 
+            if( olen < hlen + slen + 2 )
+                return( POLARSSL_ERR_RSA_BAD_INPUT_DATA );
+
             memset( sig, 0, olen );
             memset( &md_ctx, 0, sizeof( md_context_t ) );