From 5db5edc99a8386516da06f8078e5134ccd65a64b Mon Sep 17 00:00:00 2001 From: Mansour Ahmadi Date: Tue, 11 Dec 2018 17:26:50 -0500 Subject: [PATCH] fix inconsistent flen check in rsa_pk1 and rsa_oaep Fixes #7117 Reviewed-by: Kurt Roeckx Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/7880) (cherry picked from commit 4fea7005c3d08ed0d575bdea5082b7b0ce355237) --- crypto/rsa/rsa_pk1.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/crypto/rsa/rsa_pk1.c b/crypto/rsa/rsa_pk1.c index b3a7a06117..0626907418 100644 --- a/crypto/rsa/rsa_pk1.c +++ b/crypto/rsa/rsa_pk1.c @@ -161,7 +161,7 @@ int RSA_padding_check_PKCS1_type_2(unsigned char *to, int tlen, unsigned int good, found_zero_byte, mask; int zero_index = 0, msg_index, mlen = -1; - if (tlen < 0 || flen < 0) + if (tlen <= 0 || flen <= 0) return -1; /* -- 2.25.1