1884276 - [CID 1592948] illegal access /cmd/lib/basicutil.c: 849 in SECU_ecName2params()

Status: RESOLVED FIXED

(NSS :: Tools, defect, P3)

Description

[John Schanck [:jschanck]]

*** CID 1592948:  Memory - illegal accesses  (OVERRUN)
/cmd/lib/basicutil.c: 849 in SECU_ecName2params()
843     
844     SECStatus
845     SECU_ecName2params(ECCurveName curve, SECItem *params)
846     {
847         SECOidData *oidData = NULL;
848     
>>>     CID 1592948:  Memory - illegal accesses  (OVERRUN)
>>>     Overrunning array "ecCurve_oid_map" of 60 4-byte elements at element index 60 (byte offset 243) using index "curve" (which evaluates to 60).
849         if ((curve < ECCurve_noName) || (curve > ECCurve_pastLastCurve) ||
850             ((oidData = SECOID_FindOIDByTag(ecCurve_oid_map[curve])) == NULL)) {
851             PORT_SetError(SEC_ERROR_UNSUPPORTED_ELLIPTIC_CURVE);
852             return SECFailure;
853         }
854     

Comment 1

[John Schanck [:jschanck]]

Attachment: Bug 1884276 - add ed25519 to SECU_ecName2params. r=nkulatova

Comment 2

[John Schanck [:jschanck]]

https://hg.mozilla.org/projects/nss/rev/c128c1d41837a2d096a26710e9bb7342bdbc1acc