commit 43e9297e1299f01e08420ff85b9b54102d7aeab4
author Janos Follath <janos.follath@arm.com> Tue Feb 09 14:51:35 2016 +0000
committer Simon Butcher <simon.butcher@arm.com> Wed May 18 19:30:09 2016 +0100
tree e8b345607321ca68560cbcf3e666709a237d5bb9
parent 9ccbd6313fc4d26a747a8cde90eea29fae1887fc

Included test for integer underflow.

library/rsa.c

diff --git a/library/rsa.c b/library/rsa.c
index f686c4c..3bbf248 100644
--- a/library/rsa.c
+++ b/library/rsa.c
@@ -723,6 +723,10 @@
      */
     hlen = mbedtls_md_get_size( md_info );
 
+    // checking for integer underflow
+    if( 2 * hlen + 2 > ilen )
+        return( MBEDTLS_ERR_RSA_BAD_INPUT_DATA );
+
     mbedtls_md_init( &md_ctx );
     mbedtls_md_setup( &md_ctx, md_info, 0 );