[src/netbsd-6-1]: src/crypto/external/bsd/openssl/dist/crypto/evp Apply patch...

[snj <snj%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/1abb90e1b5e7
branches:  netbsd-6-1
changeset: 776169:1abb90e1b5e7
user:      snj <snj%NetBSD.org@localhost>
date:      Sun Feb 05 05:53:04 2017 +0000

description:
Apply patch (requested by spz in ticket #1355):
Fix CVE-2017-3731.

diffstat:

 crypto/external/bsd/openssl/dist/crypto/evp/e_rc4_hmac_md5.c |  2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)

diffs (12 lines):

diff -r b427dad4e58f -r 1abb90e1b5e7 crypto/external/bsd/openssl/dist/crypto/evp/e_rc4_hmac_md5.c
--- a/crypto/external/bsd/openssl/dist/crypto/evp/e_rc4_hmac_md5.c      Sun Feb 05 05:47:28 2017 +0000
+++ b/crypto/external/bsd/openssl/dist/crypto/evp/e_rc4_hmac_md5.c      Sun Feb 05 05:53:04 2017 +0000
@@ -267,6 +267,8 @@
             len = p[arg - 2] << 8 | p[arg - 1];
 
             if (!ctx->encrypt) {
+                if (len < MD5_DIGEST_LENGTH)
+                    return -1;
                 len -= MD5_DIGEST_LENGTH;
                 p[arg - 2] = len >> 8;
                 p[arg - 1] = len;