eden-emu/mbedtls
15
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix 1-byte buffer overflow in mbedtls_mpi_write_string()

Browse source 
This can only occur for negative numbers. Fixes #2404.
This commit is contained in:
Hanno Becker 2019-02-01 16:41:30 +00:00
parent f352f75f6b
commit c983c81a23
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
library/bignum.c
View file

@ -602,7 +602,10 @@ int mbedtls_mpi_write_string( const mbedtls_mpi *X, int radix,
mbedtls_mpi_init( &T ); mbedtls_mpi_init( &T );
if( X->s == -1 ) if( X->s == -1 )
{
*p++ = '-'; *p++ = '-';
buflen--;
}
if( radix == 16 ) if( radix == 16 )
{ {