Attachment #1025 for bug #1109

View | Details | Raw Unified | Return to bug 1109
Collapse All | Expand All





	if (len > 0 && (bin[0] & 0x80)) {
		error("buffer_get_bignum2_ret: negative numbers not supported");
		xfree(bin);
		return (-1);
	}
	if (len > 8 * 1024) {
		error("buffer_get_bignum2_ret: cannot handle BN of size %d", len);
		xfree(bin);
		return (-1);
	}
	BN_bin2bn(bin, len, value);

Return to bug 1109

Lines 187-196 buffer_get_bignum2_ret(Buffer *buffer, B Link Here

(-)bufaux.c (+2 lines)
187		188
188	if (len > 0 && (bin[0] & 0x80)) {	189	if (len > 0 && (bin[0] & 0x80)) {
189	error("buffer_get_bignum2_ret: negative numbers not supported");	190	error("buffer_get_bignum2_ret: negative numbers not supported");
		191	xfree(bin);
190	return (-1);	192	return (-1);
191	}	193	}
192	if (len > 8 * 1024) {	194	if (len > 8 * 1024) {
193	error("buffer_get_bignum2_ret: cannot handle BN of size %d", len);	195	error("buffer_get_bignum2_ret: cannot handle BN of size %d", len);
		196	xfree(bin);
194	return (-1);	197	return (-1);
195	}	198	}
196	BN_bin2bn(bin, len, value);	199	BN_bin2bn(bin, len, value);