diff options
| author | David Benjamin <davidben@chromium.org> | 2015-05-27 01:23:16 +0300 |
|---|---|---|
| committer | Adam Langley <agl@google.com> | 2015-05-28 00:59:35 +0300 |
| commit | 074cc04022db52072b486e60ffdf456116b10145 (patch) | |
| tree | c3d753d7b07e33b8c68a89b950d4c50aee6d573b /include/openssl/bn.h | |
| parent | 75fb74ae96264860ce37d010f010702241d7344c (diff) | |
Reject negative shifts for BN_rshift and BN_lshift.
The functions BN_rshift and BN_lshift shift their arguments to the right or
left by a specified number of bits. Unpredicatable results (including
crashes) can occur if a negative number is supplied for the shift value.
Thanks to Mateusz Kocielski (LogicalTrust), Marek Kroemeke and Filip Palian
for discovering and reporting this issue.
(Imported from upstream's 7cc18d8158b5fc2676393d99b51c30c135502107.)
Change-Id: Ib9f5e410a46df3d7f02a61374807fba209612bd3
Reviewed-on: https://boringssl-review.googlesource.com/4892
Reviewed-by: Adam Langley <agl@google.com>
Diffstat (limited to 'include/openssl/bn.h')
| -rw-r--r-- | include/openssl/bn.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/include/openssl/bn.h b/include/openssl/bn.h index 2cd02245..d4c85df4 100644 --- a/include/openssl/bn.h +++ b/include/openssl/bn.h @@ -852,6 +852,8 @@ OPENSSL_EXPORT BIGNUM *get_rfc3526_prime_1536(BIGNUM *bn); #define BN_F_BN_usub 122 #define BN_F_bn_wexpand 123 #define BN_F_mod_exp_recp 124 +#define BN_F_BN_lshift 125 +#define BN_F_BN_rshift 126 #define BN_R_ARG2_LT_ARG3 100 #define BN_R_BAD_RECIPROCAL 101 #define BN_R_BIGNUM_TOO_LONG 102 |