commit 1e918f44c98bc0f820e174d1faf40c8382c93bee
author Gilles Peskine <Gilles.Peskine@arm.com> Mon Mar 29 22:14:51 2021 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> Thu Jun 03 18:10:04 2021 +0200
tree da100f779f226fa012e830783d55e2a07453375d
parent 02ac93a1a3bd7fe4de82866b3da2df68b9d0c622

mbedtls_mpi_random: check for invalid arguments

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

library/bignum.c

diff --git a/library/bignum.c b/library/bignum.c
index aa4b1ce..fba9acc 100644
--- a/library/bignum.c
+++ b/library/bignum.c
@@ -2445,6 +2445,11 @@
     size_t n_bits = mbedtls_mpi_bitlen( N );
     size_t n_bytes = ( n_bits + 7 ) / 8;
 
+    if( min < 0 )
+        return( MBEDTLS_ERR_MPI_BAD_INPUT_DATA );
+    if( mbedtls_mpi_cmp_int( N, min ) <= 0 )
+        return( MBEDTLS_ERR_MPI_BAD_INPUT_DATA );
+
     /*
      * Match the procedure given in RFC 6979 §3.3 (deterministic ECDSA)
      * when f_rng is a suitably parametrized instance of HMAC_DRBG: