summaryrefslogtreecommitdiff
path: root/Cryptlib/OpenSSL/crypto/rsa/rsa_pmeth.c
diff options
context:
space:
mode:
authorGary Lin <glin@suse.com>2017-03-15 15:42:28 +0800
committerPeter Jones <pjones@redhat.com>2017-03-24 18:28:30 -0400
commitf48505bfb2b479694c01f7c56bd3548dfe243f46 (patch)
tree847f1a623556f73c602628a9e5e8d5d590e9fc99 /Cryptlib/OpenSSL/crypto/rsa/rsa_pmeth.c
parent832152986545e8fc66f1ed5cf9d8bf518c7df2b3 (diff)
downloadefi-boot-shim-f48505bfb2b479694c01f7c56bd3548dfe243f46.tar.gz
efi-boot-shim-f48505bfb2b479694c01f7c56bd3548dfe243f46.zip
Update to openssl 1.0.2k
Signed-off-by: Gary Lin <glin@suse.com>
Diffstat (limited to 'Cryptlib/OpenSSL/crypto/rsa/rsa_pmeth.c')
-rw-r--r--Cryptlib/OpenSSL/crypto/rsa/rsa_pmeth.c4
1 files changed, 4 insertions, 0 deletions
diff --git a/Cryptlib/OpenSSL/crypto/rsa/rsa_pmeth.c b/Cryptlib/OpenSSL/crypto/rsa/rsa_pmeth.c
index 94db87a0..ac583bf6 100644
--- a/Cryptlib/OpenSSL/crypto/rsa/rsa_pmeth.c
+++ b/Cryptlib/OpenSSL/crypto/rsa/rsa_pmeth.c
@@ -373,6 +373,10 @@ static int pkey_rsa_verify(EVP_PKEY_CTX *ctx,
if (rctx->pad_mode == RSA_PKCS1_PADDING)
return RSA_verify(EVP_MD_type(rctx->md), tbs, tbslen,
sig, siglen, rsa);
+ if (tbslen != (size_t)EVP_MD_size(rctx->md)) {
+ RSAerr(RSA_F_PKEY_RSA_VERIFY, RSA_R_INVALID_DIGEST_LENGTH);
+ return -1;
+ }
if (rctx->pad_mode == RSA_X931_PADDING) {
if (pkey_rsa_verifyrecover(ctx, NULL, &rslen, sig, siglen) <= 0)
return 0;