diff options
| author | tb <> | 2023-07-04 15:09:31 +0000 |
|---|---|---|
| committer | tb <> | 2023-07-04 15:09:31 +0000 |
| commit | 9d190ec0e534650cdc84b1cd4b55351f19456cbe (patch) | |
| tree | c8818e400aed57a0f8fd1e48aa76f778774458ff /src/usr.sbin | |
| parent | c6e12a51459163768f29eb01b0356016f3f5b793 (diff) | |
| download | openbsd-9d190ec0e534650cdc84b1cd4b55351f19456cbe.tar.gz openbsd-9d190ec0e534650cdc84b1cd4b55351f19456cbe.tar.bz2 openbsd-9d190ec0e534650cdc84b1cd4b55351f19456cbe.zip | |
Avoid outputting invalid signatures
The caller can provide an r which will be added to the ECDSA_SIG unchecked.
This can happen via ECDSA_{,do_}sign_ex() or ECDSA_sign_setup() or else via
a custom sign_sig() handler. Therefore add a check that it is in the bounds
required.
Since k was long thrown away, there's no way to check kinv, so it needs to
be trusted. Misdesigned APIs that will output garbage everywhere...
ok jsing
Diffstat (limited to 'src/usr.sbin')
0 files changed, 0 insertions, 0 deletions