(RC2_set_key): abort on erroneous input (len <= 0) size that will case
out out bound indexing, and its invalid input. git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17022 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -87,6 +87,8 @@ RC2_set_key(RC2_KEY *key, int len, const unsigned char *data, int bits)
|
|||||||
unsigned char k[128];
|
unsigned char k[128];
|
||||||
int j, T8, TM;
|
int j, T8, TM;
|
||||||
|
|
||||||
|
if (len <= 0)
|
||||||
|
abort();
|
||||||
if (len > 128)
|
if (len > 128)
|
||||||
len = 128;
|
len = 128;
|
||||||
if (bits <= 0 || bits > 1024)
|
if (bits <= 0 || bits > 1024)
|
||||||
|
Reference in New Issue
Block a user