romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-08-20 07:03:56 +03:00
Code Issues Projects Releases Packages Wiki Activity

cyassl: Check for invalid length parameter in Curl_cyassl_random

Browse source
This commit is contained in:
Jay Satiro 2015-03-25 02:37:20 -04:00 • committed by Daniel Stenberg
parent ec31962640
commit d29f8b460c
1 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
lib/vtls/cyassl.c
View file

@ -640,7 +640,9 @@ int Curl_cyassl_random(struct SessionHandle *data,
(void)data;
if(InitRng(&rng))
return 1;
if(RNG_GenerateBlock(&rng, entropy, length))
if(length > UINT_MAX)
return 1;
if(RNG_GenerateBlock(&rng, entropy, (unsigned)length))
return 1;
return 0;
}