openssl/crypto/srp
Matt Caswell 73f0df8331 Add some sanity checks around usage of t_fromb64()
The internal SRP function t_fromb64() converts from base64 to binary. It
does not validate that the size of the destination is sufficiently large -
that is up to the callers. In some places there was such a check, but not
in others.

Add an argument to t_fromb64() to provide the size of the destination
buffer and validate that we don't write too much data. Also add some sanity
checks to the callers where appropriate.

With thanks to Shi Lei for reporting this issue.

Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-09-14 10:06:41 +01:00
..
build.info unified build scheme: add build.info files 2016-02-01 12:46:58 +01:00
srp_lib.c Fix mem leak on error path 2016-08-23 00:19:15 +01:00
srp_vfy.c Add some sanity checks around usage of t_fromb64() 2016-09-14 10:06:41 +01:00