add sanity checks on oneshot hash pointers

Author: bigbrett

src/image.c

@@ -989,6 +989,8 @@ static int header_sha256(wc_Sha256 *sha256_ctx, struct wolfBoot_image *img)
 #endif
     end_sha = stored_sha - (2 * sizeof(uint16_t)); /* Subtract 2 Type + 2 Len */
 #ifdef WOLFBOOT_IMG_HASH_ONESHOT
+    if (end_sha <= p)
+        return -1;
     wc_Sha256Update(sha256_ctx, p, (word32)(end_sha - p));
 #else
     {
@@ -1019,6 +1021,8 @@ static int image_sha256(struct wolfBoot_image *img, uint8_t *hash)
     if (header_sha256(&sha256_ctx, img) != 0)
         return -1;
 #ifdef WOLFBOOT_IMG_HASH_ONESHOT
+    if (img->fw_base == NULL)
+        return -1;
     wc_Sha256Update(&sha256_ctx, img->fw_base, img->fw_size);
 #else
     {
@@ -1092,6 +1096,8 @@ static int header_sha384(wc_Sha384 *sha384_ctx, struct wolfBoot_image *img)
 #endif
     end_sha = stored_sha - (2 * sizeof(uint16_t)); /* Subtract 2 Type + 2 Len */
 #ifdef WOLFBOOT_IMG_HASH_ONESHOT
+    if (end_sha <= p)
+        return -1;
     wc_Sha384Update(sha384_ctx, p, (word32)(end_sha - p));
 #else
     {
@@ -1125,6 +1131,8 @@ static int image_sha384(struct wolfBoot_image *img, uint8_t *hash)
     if (header_sha384(&sha384_ctx, img) != 0)
         return -1;
 #ifdef WOLFBOOT_IMG_HASH_ONESHOT
+    if (img->fw_base == NULL)
+        return -1;
     wc_Sha384Update(&sha384_ctx, img->fw_base, img->fw_size);
 #else
     {
@@ -1201,6 +1209,8 @@ static int header_sha3_384(wc_Sha3 *sha3_ctx, struct wolfBoot_image *img)
     wc_InitSha3_384(sha3_ctx, NULL, INVALID_DEVID);
     end_sha = stored_sha - (2 * sizeof(uint16_t)); /* Subtract 2 Type + 2 Len */
 #ifdef WOLFBOOT_IMG_HASH_ONESHOT
+    if (end_sha <= p)
+        return -1;
     wc_Sha3_384_Update(sha3_ctx, p, (word32)(end_sha - p));
 #else
     {
@@ -1233,6 +1243,8 @@ static int image_sha3_384(struct wolfBoot_image *img, uint8_t *hash)
     if (header_sha3_384(&sha3_ctx, img) != 0)
         return -1;
 #ifdef WOLFBOOT_IMG_HASH_ONESHOT
+    if (img->fw_base == NULL)
+        return -1;
     wc_Sha3_384_Update(&sha3_ctx, img->fw_base, img->fw_size);
 #else
     {