[openssl/openssl] 81f2b0: rands/drbg_hmac.c: Add checks for the EVP_MD_get_s...

[JiashengJiang]

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 81f2b0420abab47a7fd9fc9ef69309578115d342
      https://github.com/openssl/openssl/commit/81f2b0420abab47a7fd9fc9ef69309578115d342
  Author: Jiasheng Jiang <jiasheng at purdue.edu>
  Date:   2024-04-01 (Mon, 01 Apr 2024)

  Changed paths:
    M providers/implementations/rands/drbg_hmac.c

  Log Message:
  -----------
  rands/drbg_hmac.c: Add checks for the EVP_MD_get_size()

Add checks for the EVP_MD_get_size() to avoid integer overflow and then explicitly cast from int to size_t.

Fixes: 8bf3665196 ("Added DRBG_HMAC & DRBG_HASH + Added defaults for setting DRBG for master/public/private + renamed generate_counter back to reseed_counter + generated new cavs data tests")
Signed-off-by: Jiasheng Jiang <jiasheng at purdue.edu>

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Paul Dale <ppzgs1 at gmail.com>
Reviewed-by: Tom Cosgrove <tom.cosgrove at arm.com>
Reviewed-by: Neil Horman <nhorman at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23945)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications