shinys000114/libssh
1
0
Fork 0
mirror of https://git.libssh.org/projects/libssh.git synced 2026-02-09 09:54:25 +09:00
Code Issues Packages Projects Releases Wiki Activity

CVE-2023-6918: kdf: Detect context init failures

Browse Source 
Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
This commit is contained in:
Jakub Jelen
2023-12-15 13:35:14 +01:00
committed by Andreas Schneider
parent 8b66d037d5
commit 8977e246b6
1 changed files with 15 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
src/kdf.c
View File

@@ -61,20 +61,32 @@ static ssh_mac_ctx ssh_mac_ctx_init(enum ssh_kdf_digest type)
switch (type) { switch (type) {
case SSH_KDF_SHA1: case SSH_KDF_SHA1:
ctx->ctx.sha1_ctx = sha1_init(); ctx->ctx.sha1_ctx = sha1_init();
if (ctx->ctx.sha1_ctx == NULL) {
goto err;
}
return ctx; return ctx;
case SSH_KDF_SHA256: case SSH_KDF_SHA256:
ctx->ctx.sha256_ctx = sha256_init(); ctx->ctx.sha256_ctx = sha256_init();
if (ctx->ctx.sha256_ctx == NULL) {
goto err;
}
return ctx; return ctx;
case SSH_KDF_SHA384: case SSH_KDF_SHA384:
ctx->ctx.sha384_ctx = sha384_init(); ctx->ctx.sha384_ctx = sha384_init();
if (ctx->ctx.sha384_ctx == NULL) {
goto err;
}
return ctx; return ctx;
case SSH_KDF_SHA512: case SSH_KDF_SHA512:
ctx->ctx.sha512_ctx = sha512_init(); ctx->ctx.sha512_ctx = sha512_init();
if (ctx->ctx.sha512_ctx == NULL) {
goto err;
}
return ctx; return ctx;
default:
SAFE_FREE(ctx);
return NULL;
} }
err:
SAFE_FREE(ctx);
return NULL;
} }
static void ssh_mac_ctx_free(ssh_mac_ctx ctx) static void ssh_mac_ctx_free(ssh_mac_ctx ctx)