1 parent 04d9b35 commit d08a0b9Copy full SHA for d08a0b9
1 file changed
src/libopensc/card-iasecc.c
@@ -3303,6 +3303,8 @@ iasecc_compute_signature_dst(struct sc_card *card,
3303
LOG_TEST_RET(ctx, SC_ERROR_INVALID_ARGUMENTS, "It's not SC_SEC_OPERATION_SIGN");
3304
else if (!(prv->key_size & 0x1E0) || (prv->key_size & ~0x1E0))
3305
LOG_TEST_RET(ctx, SC_ERROR_INVALID_ARGUMENTS, "Invalid key size for SC_SEC_OPERATION_SIGN");
3306
+ if (sizeof(rbuf) < prv->key_size)
3307
+ LOG_FUNC_RETURN(ctx, SC_ERROR_INVALID_DATA);
3308
3309
memset(&qsign_data, 0, sizeof(qsign_data));
3310
if (env->algorithm_flags & SC_ALGORITHM_RSA_HASH_SHA1) {
0 commit comments