[openssl/openssl] c13dc3: Fix potential infinite loops in ECDSA signing.

Shane noreply at github.com
Tue Feb 28 22:37:28 UTC 2023


  Branch: refs/heads/openssl-3.0
  Home:   https://github.com/openssl/openssl
  Commit: c13dc37a07065a76e72e1188229da86ea7acf056
      https://github.com/openssl/openssl/commit/c13dc37a07065a76e72e1188229da86ea7acf056
  Author: slontis <shane.lontis at oracle.com>
  Date:   2023-03-01 (Wed, 01 Mar 2023)

  Changed paths:
    M crypto/ec/ec_err.c
    M crypto/ec/ecdsa_ossl.c
    M crypto/err/openssl.txt
    M include/crypto/ecerr.h
    M include/openssl/ecerr.h

  Log Message:
  -----------
  Fix potential infinite loops in ECDSA signing.

Similiar checks to the DSA code have been added for ECDSA also.
This should not be a problem when using named groups.

Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20384)

(cherry picked from commit 5f820bd7535b871fdfdc0303c3af23ba4be901f0)
(cherry picked from commit 2022b9e761faa465a7d8340bee51cd0c603c239b)




More information about the openssl-commits mailing list