commit 406008ab4c4a90e133b258ef0234997517876ed6
author Moran Peker <moran.peker@arm.com> Sun Apr 22 20:20:29 2018 +0300
committer itayzafrir <itay.zafrir@arm.com> Wed Sep 05 12:14:28 2018 +0300
tree ac11a26fc08996fe011f32c3c90dcd94b6b0a27a
parent bed71a2b17b5c7c046c5f4c0c3ae2176aaae200a

add missing check on output_size in psa_cipher_update func

library/psa_crypto.c

diff --git a/library/psa_crypto.c b/library/psa_crypto.c
index 2672627..0e2d6da 100644
--- a/library/psa_crypto.c
+++ b/library/psa_crypto.c
@@ -1445,7 +1445,8 @@
 {
     int ret = MBEDTLS_ERR_CIPHER_FEATURE_UNAVAILABLE;
 
-    if( output_size < input_length )
+    if( ( ( PSA_ALG_IS_STREAM_CIPHER( operation->alg ) ) && ( output_size < input_length ) )
+        || ( ( PSA_ALG_IS_BLOCK_CIPHER(operation->alg)) && ( output_size < ((operation->ctx.cipher.unprocessed_len + input_length)/16)*16 ) ) )
         return ( PSA_ERROR_BUFFER_TOO_SMALL );
 
     ret = mbedtls_cipher_update( &operation->ctx.cipher, input,