diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2017-05-29 11:59:34 +0200 |
|---|---|---|
| committer | Andreas Steffen <andreas.steffen@strongswan.org> | 2017-08-14 08:49:33 +0200 |
| commit | ef5c37fcdf47273feea320091598135688df4ef7 (patch) | |
| tree | a17fceab947c3779dd5378dcd5233f5508f0905c /scripts/keyid2sql.c | |
| parent | d35183e33e149606119eb11ea7ce853bd0efd328 (diff) | |
| download | strongswan-ef5c37fcdf47273feea320091598135688df4ef7.tar.bz2 strongswan-ef5c37fcdf47273feea320091598135688df4ef7.tar.xz | |
gmp: Fix RSA signature verification for m >= n
By definition, m must be <= n-1, we didn't enforce that and because
mpz_export() returns NULL if the passed value is zero a crash could have
been triggered with m == n.
Fixes CVE-2017-11185.
Diffstat (limited to 'scripts/keyid2sql.c')
0 files changed, 0 insertions, 0 deletions