Fix CID 1466709 : Negative value passed to a function that cant be negative in cms_sd.c

Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/12930)
This commit is contained in:
Shane Lontis 2020-09-21 11:42:41 +10:00
parent ced5231b04
commit 81777339e9

View File

@ -854,7 +854,7 @@ int CMS_SignerInfo_verify(CMS_SignerInfo *si)
alen = ASN1_item_i2d((ASN1_VALUE *)si->signedAttrs, &abuf, alen = ASN1_item_i2d((ASN1_VALUE *)si->signedAttrs, &abuf,
ASN1_ITEM_rptr(CMS_Attributes_Verify)); ASN1_ITEM_rptr(CMS_Attributes_Verify));
if (!abuf) if (abuf == NULL || alen < 0)
goto err; goto err;
r = EVP_DigestVerifyUpdate(mctx, abuf, alen); r = EVP_DigestVerifyUpdate(mctx, abuf, alen);
OPENSSL_free(abuf); OPENSSL_free(abuf);