security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-01-08 12:44:23 +01:00
Code Activity

mpi: Improve mpi_invm to detect bad input.

Browse Source 
* mpi/mpi-inv.c (mpi_invm): Return 0 for bad input.
--

Without this patch the function may enter an endless loop.  This is a
backport from libgcrypt.

GnuPG-bug-id: 1713
This commit is contained in:
Werner Koch 2014-09-11 17:06:16 +02:00
parent b89f57fe5d
commit cd53cdbc37
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
mpi/mpi-inv.c
View File

@ -165,6 +165,11 @@ mpi_invm( MPI x, MPI a, MPI n )
int sign; int sign;
int odd ; int odd ;
if (!mpi_cmp_ui (a, 0))
return 0; /* Inverse does not exists. */
if (!mpi_cmp_ui (n, 1))
return 0; /* Inverse does not exists. */
u = mpi_copy(a); u = mpi_copy(a);
v = mpi_copy(n); v = mpi_copy(n);