Fix a couple of missing bounds checks found via code analyzer.

2024-12-19 17:01:25 -07:00
parent 00f83facb2
commit 8bbe8a7c8a
2 changed files with 7 additions and 2 deletions
--- a/wolfcrypt/src/coding.c
+++ b/wolfcrypt/src/coding.c
@@ -297,8 +297,10 @@ static int CEscape(int escaped, byte e, byte* out, word32* i, word32 maxSz,

    if (raw)
        basic = e;
-    else
+    else if (e <= sizeof(base64Encode))
        basic = base64Encode[e];
+    else
+        return BAD_FUNC_ARG;

    /* check whether to escape. Only escape for EncodeEsc */
    if (escaped == WC_ESC_NL_ENC) {