Merge pull request #9664 from padelsbach/hmac-update-len-check

Add length check to Hmac_UpdateFinal_CT to prevent build error
2026-01-16 15:35:58 -06:00
parent 9aabef04ba f3fb63aea7
commit 0ceed2d832
1 changed files with 3 additions and 0 deletions
--- a/src/tls.c
+++ b/src/tls.c
@@ -937,6 +937,9 @@ static int Hmac_UpdateFinal_CT(Hmac* hmac, byte* digest, const byte* in,
    word32       realLen;
    byte         extraBlock;

+    if (macLen <= 0 || macLen > (int)sizeof(hmac->innerHash))
+        return BAD_FUNC_ARG;
+
    switch (hmac->macType) {
    #ifndef NO_SHA
        case WC_SHA: