projects / oweals / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f15c99f) | patch
Check for 0 modulus in BN_MONT_CTX_set
authorMatt Caswell <matt@openssl.org>
Mon, 10 Aug 2015 11:00:29 +0000 (12:00 +0100)
committerMatt Caswell <matt@openssl.org>
Tue, 11 Aug 2015 19:23:00 +0000 (20:23 +0100)
commitb11980d79a52ec08844f08bea0e66c04b691840b
tree8a84001bdf5d80b71a439564986f959c20d52641tree | snapshot
parentf15c99f4d4a96b692bdbb6f343c9112f2fa5a8edcommit | diff
Check for 0 modulus in BN_MONT_CTX_set

The function BN_MONT_CTX_set was assuming that the modulus was non-zero
and therefore that |mod->top| > 0. In an error situation that may not be
the case and could cause a seg fault.

This is a follow on from CVE-2015-1794.

Reviewed-by: Richard Levitte <levitte@openssl.org>
crypto/bn/bn_mont.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.