Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Check DSA parameters for excessive sizes before validating #626

Merged

Conversation

dongbeiouba
Copy link
Member

This avoids overly long computation of various validation checks.

Fixes CVE-2024-4603

Checklist
  • https://yuque.com/tsdoc 增加或更新了必要的文档
  • 增加或更新了必要的测试用例
  • 对于重要修改,更新了CHANGES文件
  • 当前修改存在对已有API参数或返回值的改变
  • 当前修改存在对旧版本功能的兼容性改变(如网络协议或密码算法)

This avoids overly long computation of various validation
checks.

Fixes CVE-2024-4603
@dongbeiouba dongbeiouba added bug Something isn't working branch-8.4 labels Jun 24, 2024
@dongbeiouba dongbeiouba requested review from InfoHunter, uudiin, wa5i, zzl360 and a team June 24, 2024 02:48
@dongbeiouba dongbeiouba merged commit 5ae9465 into Tongsuo-Project:8.4-stable Jun 26, 2024
90 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
branch-8.4 bug Something isn't working
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants