From e01da67d581374934dadb288caf8bb8a05db59c4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= Date: Sun, 9 Apr 2006 17:03:21 +0000 Subject: [PATCH] (RC2_set_key): abort on erroneous input (len <= 0) size that will case out out bound indexing, and its invalid input. git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17022 ec53bebd-3082-4978-b11e-865c3cabbd6b --- lib/des/rc2.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/lib/des/rc2.c b/lib/des/rc2.c index be307a2d6..e377ca790 100644 --- a/lib/des/rc2.c +++ b/lib/des/rc2.c @@ -87,6 +87,8 @@ RC2_set_key(RC2_KEY *key, int len, const unsigned char *data, int bits) unsigned char k[128]; int j, T8, TM; + if (len <= 0) + abort(); if (len > 128) len = 128; if (bits <= 0 || bits > 1024)