limit malloc'ed data in eax_decrypt_verify_memory()

2017-08-03 15:00:37 +02:00 · 2017-08-03 15:00:37 +02:00 · 9f020b17df
commit 9f020b17df
parent 05f7393067
1 changed files with 3 additions and 0 deletions
--- a/src/encauth/eax/eax_decrypt_verify_memory.c
+++ b/src/encauth/eax/eax_decrypt_verify_memory.c
@ -55,6 +55,9 @@ int eax_decrypt_verify_memory(int cipher,
   /* default to zero */
   *stat = 0;

+   /* limit taglen */
+   taglen = MIN(taglen, MAXBLOCKSIZE);
+
   /* allocate ram */
   buf = XMALLOC(taglen);
   eax = XMALLOC(sizeof(*eax));