Browse code

bb11444: adding check to verify a valid number of rounds for rijndael aes encryption/decryption

Mickey Sola authored on 2016/01/15 05:31:02
Showing 1 changed files
... ...
@@ -701,6 +701,10 @@ static void aes_decrypt(const unsigned char *in, off_t *length, unsigned char *q
701 701
 
702 702
     cli_dbgmsg("aes_decrypt: Calling rijndaelSetupDecrypt\n");
703 703
     nrounds = rijndaelSetupDecrypt(rk, (const unsigned char *)key, key_n*8);
704
+    if (!nrounds) {
705
+	cli_dbgmsg("cli_pdf: aes_decrypt: nrounds = 0\n");
706
+	return;
707
+    }
704 708
     cli_dbgmsg("aes_decrypt: Beginning rijndaelDecrypt\n");
705 709
 
706 710
     while (len >= 16) {