arno/trezor-firmware
1
0
Fork 0
mirror of https://github.com/trezor/trezor-firmware.git synced 2024-12-23 23:08:14 +00:00
Code Issues Releases Wiki Activity

fix(crypto): Fix undefined behavior in xmr_read_varint().

Browse Source
This commit is contained in:
Andrew Kozlik 2020-12-02 18:20:16 +01:00 committed by Andrew Kozlik
parent dab353f888
commit c5f26beeea
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
crypto/monero/serialize.c
View File

@ -37,7 +37,7 @@ int xmr_read_varint(uint8_t *buff, size_t buff_size, uint64_t *val) {
for (int shift = 0; read < buff_size; shift += 7, ++read) {
uint8_t byte = buff[read];
if (byte == 0 && shift != 0) {
if ((byte == 0 && shift != 0) || (shift >= 63 && byte > 1)) {
return -1;
}