From: Dr. Stephen Henson <steve@openssl.org>
Date: Sat, 5 Jul 2014 23:32:44 +0000 (+0100)
Subject: Sanity check keylength in PVK files.
X-Git-Tag: OpenSSL_1_0_1i~48
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=98a3c3c514f9966d3bd948dbdf1a6370b597d8d8;p=oweals%2Fopenssl.git

Sanity check keylength in PVK files.

PR#2277
(cherry picked from commit 733a6c882e92f8221bd03a51643bb47f5f81bb81)
---

diff --git a/crypto/pem/pvkfmt.c b/crypto/pem/pvkfmt.c
index b1bf71a5da..ae89f8281a 100644
--- a/crypto/pem/pvkfmt.c
+++ b/crypto/pem/pvkfmt.c
@@ -759,6 +759,11 @@ static EVP_PKEY *do_PVK_body(const unsigned char **in,
 		/* Copy BLOBHEADER across, decrypt rest */
 		memcpy(enctmp, p, 8);
 		p += 8;
+		if (keylen < 8)
+			{
+			PEMerr(PEM_F_DO_PVK_BODY, PEM_R_PVK_TOO_SHORT);
+			return NULL;
+			}
 		inlen = keylen - 8;
 		q = enctmp + 8;
 		if (!EVP_DecryptInit_ex(&cctx, EVP_rc4(), NULL, keybuf, NULL))