Skip to content

sm4_ccm bug #1854

@xiebaiqian

Description

@xiebaiqian

sm4_ccm.c 162行

if (inlen_size < 8 && inlen >= (size_t)(1 << (inlen_size * 8))) {
error_print();
return -1;
}
当inlen_size =4的时候,语句(size_t)(1 << (inlen_size * 8))得到结果是1

正确的语句:
if (inlen_size < 8 && inlen >= ((size_t)1 << (inlen_size * 8))) {
error_print();
return -1;
}

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions