[openssl/openssl] 882a38: rsa/rsa_pmeth.c: Add the checks for the EVP_MD_CTX...

[JiashengJiang]

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 882a387d0dc12afe8612c4d3f6b9cae5c04611d7
      https://github.com/openssl/openssl/commit/882a387d0dc12afe8612c4d3f6b9cae5c04611d7
  Author: Jiasheng Jiang <jiasheng at purdue.edu>
  Date:   2024-04-03 (Wed, 03 Apr 2024)

  Changed paths:
    M crypto/rsa/rsa_pmeth.c

  Log Message:
  -----------
  rsa/rsa_pmeth.c: Add the checks for the EVP_MD_CTX_get_size()

Add the checks for the return value of EVP_MD_CTX_get_size() before explicitly
cast them to size_t to avoid the integer overflow.

Fixes: 75d44c0452 ("Store digests as EVP_MD instead of a NID.")
Signed-off-by: Jiasheng Jiang <jiasheng at purdue.edu>

Reviewed-by: Neil Horman <nhorman at openssl.org>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23953)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications