mirror of
https://github.com/openssl/openssl.git
synced 2024-11-27 05:21:51 +08:00
ecca16632a
Change size comparison from > (GT) to >= (GTE) to ensure an additional byte of output buffer, to prevent OOB reads/writes later in the function Reject input strings larger than 2GB Detect invalid output buffer size and return early Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2672) |
||
---|---|---|
.. | ||
build.info | ||
srp_lib.c | ||
srp_vfy.c |