diff options
| author | Andy Polyakov <appro@openssl.org> | 2018-07-25 10:29:51 +0200 |
|---|---|---|
| committer | Andy Polyakov <appro@openssl.org> | 2018-08-01 16:15:25 +0200 |
| commit | 6a815969776e3329fdffcc12c77e047e3a15be78 (patch) | |
| tree | 3506c0c2a8bb310d757bb6f26fb6f0a685cd6d6d /crypto | |
| parent | 83325a68ad5fdfc359ab9d82a0e0da8e5fe7ede1 (diff) | |
bn/bn_mod.c: harmonize BN_mod_add_quick with original implementation.
New implementation failed to correctly reset r->neg flag. Spotted by
OSSFuzz.
Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6810)
(cherry picked from commit 70a579ae2f37437a1e02331eeaa84e1b68ba021e)
Diffstat (limited to 'crypto')
| -rw-r--r-- | crypto/bn/bn_mod.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/crypto/bn/bn_mod.c b/crypto/bn/bn_mod.c index df6f1e2452..23ddd4805d 100644 --- a/crypto/bn/bn_mod.c +++ b/crypto/bn/bn_mod.c @@ -197,6 +197,7 @@ int bn_mod_add_fixed_top(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, ((volatile BN_ULONG *)tp)[i] = 0; } r->top = mtop; + r->neg = 0; if (tp != storage) OPENSSL_free(tp); |