commit 5bcb24b56ec39069c75c747555c3d3c259b84f2c
author Gilles Peskine <Gilles.Peskine@arm.com> Fri Nov 08 17:33:29 2019 +0100
committer Gilles Peskine <Gilles.Peskine@arm.com> Wed Nov 13 10:57:59 2019 +0100
tree 69deb6e7d37ed7024d60be14cf84c81019107926
parent 5460565be448bd573a9b4db8d7f5e6e1f7e0ef32

Fix output buffer length check in pk_opaque_sign_wrap

library/pk_wrap.c

diff --git a/library/pk_wrap.c b/library/pk_wrap.c
index 7ffb2c0..702c3bb 100644
--- a/library/pk_wrap.c
+++ b/library/pk_wrap.c
@@ -1019,7 +1019,7 @@
         return( mbedtls_psa_err_translate_pk( status ) );
     buf_len = MBEDTLS_ECDSA_MAX_SIG_LEN( psa_get_key_bits( &attributes ) );
     psa_reset_key_attributes( &attributes );
-    if( *sig_len > MBEDTLS_PK_SIGNATURE_MAX_SIZE )
+    if( buf_len > MBEDTLS_PK_SIGNATURE_MAX_SIZE )
         return( MBEDTLS_ERR_PK_BAD_INPUT_DATA );
 
     /* make the signature */