From 8652f33f35f5aa6e87a4bdcb0a42f4f491db9121 Mon Sep 17 00:00:00 2001
From: Steffen Jaeckel <s@jaeckel.eu>
Date: Sun, 25 May 2014 00:28:51 +0200
Subject: [PATCH] pmac_init: prevent possible out of bounds access of polys[]

---
 src/mac/pmac/pmac_init.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/mac/pmac/pmac_init.c b/src/mac/pmac/pmac_init.c
index 6c515fa..81b7e85 100644
--- a/src/mac/pmac/pmac_init.c
+++ b/src/mac/pmac/pmac_init.c
@@ -63,6 +63,9 @@ int pmac_init(pmac_state *pmac, int cipher, const unsigned char *key, unsigned l
           break;
        }
    }
+   if (poly >= (int)(sizeof(polys)/sizeof(polys[0]))) {
+      return CRYPT_INVALID_ARG;
+    }
    if (polys[poly].len != pmac->block_len) {
       return CRYPT_INVALID_ARG;
    }