Commit 2d66860
Fix context-length validation in ACVP test binary
Three places in acvp_mldsa.c validated the context argument length
using `mlen > MAX_MSG_LENGTH` instead of `ctxlen > MAX_CTX_LENGTH`,
meaning an oversized context would not be caught before being written
into a MAX_CTX_LENGTH-sized stack buffer.
Signed-off-by: Hanno Becker <beckphan@amazon.co.uk>1 parent 5cac01c commit 2d66860
1 file changed
Lines changed: 3 additions & 3 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
644 | 644 | | |
645 | 645 | | |
646 | 646 | | |
647 | | - | |
| 647 | + | |
648 | 648 | | |
649 | 649 | | |
650 | 650 | | |
| |||
745 | 745 | | |
746 | 746 | | |
747 | 747 | | |
748 | | - | |
| 748 | + | |
749 | 749 | | |
750 | 750 | | |
751 | 751 | | |
| |||
825 | 825 | | |
826 | 826 | | |
827 | 827 | | |
828 | | - | |
| 828 | + | |
829 | 829 | | |
830 | 830 | | |
831 | 831 | | |
| |||
0 commit comments