Просмотр исходного кода

Merge branch 'bugfix/eap_hash_key_len_validation' into 'master'

esp_wifi:adding hash key length validation

Closes WIFI-4882 and WIFI-4825

See merge request espressif/esp-idf!20438
Kapil Gupta 3 лет назад
Родитель
Сommit
7a7bdf05d5

+ 4 - 1
components/wpa_supplicant/esp_supplicant/src/crypto/crypto_mbedtls-rsa.c

@@ -339,8 +339,11 @@ int  crypto_public_key_decrypt_pkcs1(struct crypto_public_key *key,
 	size_t len;
 	u8 *pos;
 	mbedtls_pk_context *pkey = (mbedtls_pk_context *)key;
+	len = mbedtls_pk_rsa(*pkey)->MBEDTLS_PRIVATE(len);
+	if (len != crypt_len) {
+		return -1;
+	}
 
-	len = *plain_len;
 	if (mbedtls_rsa_public(mbedtls_pk_rsa(*pkey), crypt, plain) < 0)
 		return -1;