Tadeusz Struk <tadeusz.st...@intel.com> wrote:

> +             if (memcmp(sig->digest, output, sig->digest_size) ||
> +                 req->dst_len != sig->digest_size)

You must always do the size check first!

David
--
To unsubscribe from this list: send the line "unsubscribe linux-crypto" in
the body of a message to majord...@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to