From 53c44ff07775925292f656f524b62d6553d0c0d2 Mon Sep 17 00:00:00 2001 From: Pekka Riikonen Date: Tue, 26 Sep 2006 06:03:40 +0000 Subject: [PATCH] Check for equal data lengths in verification --- lib/silccrypt/silcpkcs1.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/lib/silccrypt/silcpkcs1.c b/lib/silccrypt/silcpkcs1.c index 88355e76..0094e130 100644 --- a/lib/silccrypt/silcpkcs1.c +++ b/lib/silccrypt/silcpkcs1.c @@ -679,10 +679,13 @@ SilcBool silc_pkcs1_verify_no_oid(void *public_key, if (hash) { silc_hash_make(hash, data, data_len, hashr); data = hashr; + data_len = silc_hash_len(hash); } /* Compare */ - if (memcmp(data, unpadded, len)) + if (len != data_len) + ret = FALSE; + else if (memcmp(data, unpadded, len)) ret = FALSE; memset(verify, 0, verify_len); -- 2.24.0