cheng/libsodium
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

pwhash_scrypt(): do not allow outlen to be > SIZE_MAX

Browse Source
This commit is contained in:
Frank Denis 2014-05-07 00:27:18 -07:00
parent 2702aa1a24
commit 95d9a625db
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/libsodium/crypto_pwhash/scryptxsalsa208sha256/pwhash_scryptxsalsa208sha256.c
View File

@ -61,7 +61,7 @@ crypto_pwhash_scryptxsalsa208sha256(unsigned char * const out,
uint32_t p;
uint32_t r;
if (passwdlen > SIZE_MAX) {
if (passwdlen > SIZE_MAX || outlen > SIZE_MAX) {
errno = EFBIG;
return -1;
}
@ -73,5 +73,5 @@ crypto_pwhash_scryptxsalsa208sha256(unsigned char * const out,
(const uint8_t *) salt,
crypto_pwhash_scryptxsalsa208sha256_SALTBYTES,
(uint64_t) (1) << N_log2, r, p,
out, outlen);
out, (size_t) outlen);
}