commit 8334d00772c155c41eb1a735417fd98dfd0382ee
author Valerio Setti <valerio.setti@nordicsemi.no> Mon Feb 05 15:35:26 2024 +0100
committer Valerio Setti <valerio.setti@nordicsemi.no> Mon Feb 05 15:35:26 2024 +0100
tree 32309fd93502f5c7cd77b247cebed5b2d7346659
parent 2bd0ecdf4582ee04877c028c456ecf487d47dc9b

psa_util: improve check of raw_len in mbedtls_ecdsa_raw_to_der()

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>

library/psa_util.c

diff --git a/library/psa_util.c b/library/psa_util.c
index 1bb02e9..f3fcd1d 100644
--- a/library/psa_util.c
+++ b/library/psa_util.c
@@ -413,7 +413,7 @@
     unsigned char *p = der + der_size;
     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;
 
-    if (raw_len < 2 * coordinate_len) {
+    if ((raw_len < 2 * coordinate_len) || (raw_len > 2 * coordinate_len)) {
         return MBEDTLS_ERR_ASN1_INVALID_DATA;
     }