Merge "Verify token length before adb signs it"

This commit is contained in:
Sami Tolvanen 2015-01-28 14:32:51 +00:00 committed by Gerrit Code Review
commit 9c4c5a6ed9
1 changed files with 5 additions and 0 deletions

View File

@ -395,6 +395,11 @@ int adb_auth_sign(void *node, void *token, size_t token_size, void *sig)
unsigned int len;
struct adb_private_key *key = node_to_item(node, struct adb_private_key, node);
if (token_size != TOKEN_SIZE) {
D("Unexpected token size %zd\n", token_size);
return 0;
}
if (!RSA_sign(NID_sha1, token, token_size, sig, &len, key->rsa)) {
return 0;
}