Commit 73ab3411 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

PR: 2522 

Submitted by: Henrik Grindal Bakken <henribak@cisco.com>

Don't compare past end of buffer.
parent 62f29eb1

fips/rand/fips_drbg_lib.c

+1 −1
Original line number Diff line number Diff line
@@ -145,7 +145,7 @@ static size_t fips_get_entropy(DRBG_CTX *dctx, unsigned char **pout, 
	if (rv < (min_len + bl) || (rv % bl))

		return 0;

	/* Compare consecutive blocks for continuous PRNG test */

	for (p = tout; p < tout + rv; p += bl)

	for (p = tout; p < tout + rv - bl; p += bl)

		{

		if (!memcmp(p, p + bl, bl))

			{