Muldersoft/CodeSign
Muldersoft/CodeSign
1
0
Fork 0
Code Issues Pull Requests Projects Releases 1 Wiki Activity

Make sure that 'source_length' can not be negative in case of error.

Browse Source
This commit is contained in:
LoRd_MuldeR 2021-06-26 16:06:02 +02:00
parent 4c725ca4c1
commit 198e8cd947
4 changed files with 13 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/codesign_sign.c
View File

@ -205,7 +205,7 @@ int MAIN(int argc, CHAR_T *argv[])
goto clean_up;
}
if (EVP_EncodeBlock((unsigned char*)base64, output, output_length) != base64_length)
if (int2uint(EVP_EncodeBlock((unsigned char*)base64, output, output_length)) != base64_length)
{
fputs("Error: Failed to encode signature to Base64!\n\n", stderr);
goto clean_up;

4
src/codesign_verify.c
View File

@ -176,8 +176,8 @@ int MAIN(int argc, CHAR_T *argv[])
goto clean_up;
}
source_length = EVP_DecodeBlock(source, (unsigned char*)base64, base64_length);
if ((int)source_length <= 0)
source_length = int2uint(EVP_DecodeBlock(source, (unsigned char*)base64, base64_length));
if (!(source_length > 0U))
{
fputs("Error: Failed to decode signature data from Base64 format!\n\n", stderr);
goto clean_up;

9
src/common.c
View File

@ -40,6 +40,15 @@ void print_license(void)
fputs("Please see http://www.muldersoft.com for additional information.\n\n", stderr);
}
/*-------------------------------------------------------*/
/* int2uint() */
/*-------------------------------------------------------*/
unsigned int int2uint(const int value)
{
return (value < 0) ? 0U : ((unsigned int)value);
}
/*-------------------------------------------------------*/
/* convert_wchar_to_UTF8() */
/*-------------------------------------------------------*/

1
src/common.h
View File

@ -14,6 +14,7 @@
void print_logo(const char *const app_name);
void print_license(void);
unsigned int int2uint(const int value);
char *convert_CHAR_to_UTF8(const CHAR_T *str);
char *read_line_from_file(FILE *const file, const int trim);
uint64_t get_current_time_usec(void);