[openssl/openssl] f4174b: signature/dsa_sig.c: Add checks for the EVP_MD_get...

[JiashengJiang]

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: f4174b6db41650363e41af42e82de9cc7ef09a5e
      https://github.com/openssl/openssl/commit/f4174b6db41650363e41af42e82de9cc7ef09a5e
  Author: Jiasheng Jiang <jiasheng at purdue.edu>
  Date:   2024-04-09 (Tue, 09 Apr 2024)

  Changed paths:
    M providers/implementations/signature/dsa_sig.c

  Log Message:
  -----------
  signature/dsa_sig.c: Add checks for the EVP_MD_get_size()

Add checks for the EVP_MD_get_size() to avoid integer overflow and then explicitly cast from int to size_t.

Fixes: 45a845e40b ("Add EVP_DigestSign/EVP_DigestVerify support for DSA")
Signed-off-by: Jiasheng Jiang <jiasheng at purdue.edu>

Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23948)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications