From d1a4677a8a6aa44acedddc84ae276630c18ff943 Mon Sep 17 00:00:00 2001 From: Eric Blankenhorn Date: Thu, 18 Dec 2025 10:10:57 -0600 Subject: [PATCH] Null deref check in Pkcs11ECDH --- wolfcrypt/src/wc_pkcs11.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/wolfcrypt/src/wc_pkcs11.c b/wolfcrypt/src/wc_pkcs11.c index d272a3158..3ac4911f2 100644 --- a/wolfcrypt/src/wc_pkcs11.c +++ b/wolfcrypt/src/wc_pkcs11.c @@ -2764,7 +2764,8 @@ static int Pkcs11ECDH(Pkcs11Session* session, wc_CryptoInfo* info) if (ret == 0) { secSz = *info->pk.ecdh.outlen; - if (secSz > (CK_ULONG)info->pk.ecdh.private_key->dp->size) + if (info->pk.ecdh.private_key->dp != NULL && + secSz > (CK_ULONG)info->pk.ecdh.private_key->dp->size) secSz = info->pk.ecdh.private_key->dp->size; params.kdf = CKD_NULL;