[src/netbsd-6-0]: src/crypto/external/bsd/openssl/dist/crypto/evp Apply patch...

[snj <snj%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/1d061f0876b5
branches:  netbsd-6-0
changeset: 775169:1d061f0876b5
user:      snj <snj%NetBSD.org@localhost>
date:      Sun Feb 05 05:52:41 2017 +0000

description:
Apply patch (requested by spz in ticket #1355):
Fix CVE-2017-3731.

diffstat:

 crypto/external/bsd/openssl/dist/crypto/evp/e_rc4_hmac_md5.c |  2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)

diffs (12 lines):

diff -r 0cb3488468ef -r 1d061f0876b5 crypto/external/bsd/openssl/dist/crypto/evp/e_rc4_hmac_md5.c
--- a/crypto/external/bsd/openssl/dist/crypto/evp/e_rc4_hmac_md5.c      Sun Feb 05 05:46:51 2017 +0000
+++ b/crypto/external/bsd/openssl/dist/crypto/evp/e_rc4_hmac_md5.c      Sun Feb 05 05:52:41 2017 +0000
@@ -267,6 +267,8 @@
             len = p[arg - 2] << 8 | p[arg - 1];
 
             if (!ctx->encrypt) {
+                if (len < MD5_DIGEST_LENGTH)
+                    return -1;
                 len -= MD5_DIGEST_LENGTH;
                 p[arg - 2] = len >> 8;
                 p[arg - 1] = len;