[src/netbsd-6]: src/crypto/external/bsd/openssl/dist/crypto/evp Apply patch (...

[snj <snj%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/d574a07843dc
branches:  netbsd-6
changeset: 777130:d574a07843dc
user:      snj <snj%NetBSD.org@localhost>
date:      Sun Feb 05 05:53:27 2017 +0000

description:
Apply patch (requested by spz in ticket #1355):
Fix CVE-2017-3731.

diffstat:

 crypto/external/bsd/openssl/dist/crypto/evp/e_rc4_hmac_md5.c |  2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)

diffs (12 lines):

diff -r b04e91983792 -r d574a07843dc crypto/external/bsd/openssl/dist/crypto/evp/e_rc4_hmac_md5.c
--- a/crypto/external/bsd/openssl/dist/crypto/evp/e_rc4_hmac_md5.c      Sun Feb 05 05:48:00 2017 +0000
+++ b/crypto/external/bsd/openssl/dist/crypto/evp/e_rc4_hmac_md5.c      Sun Feb 05 05:53:27 2017 +0000
@@ -267,6 +267,8 @@
             len = p[arg - 2] << 8 | p[arg - 1];
 
             if (!ctx->encrypt) {
+                if (len < MD5_DIGEST_LENGTH)
+                    return -1;
                 len -= MD5_DIGEST_LENGTH;
                 p[arg - 2] = len >> 8;
                 p[arg - 1] = len;