Manuel Pégourié-Gonnard 4b20c0ee53 Fix potential stack buffer overflow in ecjpake ...

Two causes:
- the buffer is too short (missing 4 bytes for encoding id_len)
- the test was wrong

Would only happen when MBEDTLS_ECP_MAX_BITS == the bitsize of the curve
actually used (does not happen in the default config).

Could not be triggered remotely.

2015-10-20 16:20:56 +02:00

37 KiB

Raw Blame History

View Raw