Gilles Peskine | 37e7736 | 2021-06-09 18:55:57 +0200 | [diff] [blame] | 1 | Bugfix |
2 | * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with | ||||
3 | A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug | ||||
4 | could not be triggered by code that constructed A with one of the | ||||
5 | mbedtls_mpi_read_xxx functions (including in particular TLS code) since | ||||
6 | those always built an mpi object with at least one limb. | ||||
7 | Credit to OSS-Fuzz. Fixes #4641. |