QPQ-AG/libsodium
12
0
Fork 0
mirror of https://github.com/jedisct1/libsodium.git synced 2026-08-25 08:37:13 +09:00
Code Issues Packages Projects Releases Wiki Activity

crypto_sign(): read the copy, not the message, to properly handle overlaps

Browse Source
This commit is contained in:
Frank Denis
2014-09-21 22:06:45 -07:00
parent 51dfcfc223
commit ad5a165f94
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libsodium/crypto_sign/ed25519/ref10/sign.c
+2 -1
View File
@@ -63,7 +63,8 @@ crypto_sign(unsigned char *sm, unsigned long long *smlen,
memmove(sm + crypto_sign_ed25519_BYTES, m, mlen);
/* LCOV_EXCL_START */
if (crypto_sign_detached(sm, &siglen, m, mlen, sk) != 0 ||
if (crypto_sign_detached(sm, &siglen, sm + crypto_sign_ed25519_BYTES,
mlen, sk) != 0 ||
siglen != crypto_sign_ed25519_BYTES) {
if (smlen != NULL) {
*smlen = 0;