emo/xbps
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

lib/download.c: fix digestlen assert and add if condition to avoid misuse

Browse Source
This commit is contained in:
Duncan Overbruck 2020-02-10 14:08:39 +01:00 committed by Juan RP
parent 2ef79bcc09
commit d99aae586a
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
lib/download.c
View File

@ -111,8 +111,12 @@ xbps_fetch_file_dest_sha256(struct xbps_handle *xhp, const char *uri, const char
assert(xhp); assert(xhp);
assert(uri); assert(uri);
if (digest) { if (digest != NULL) {
assert(digestlen != XBPS_SHA256_DIGEST_SIZE); assert(digestlen >= XBPS_SHA256_DIGEST_SIZE);
if (digestlen < XBPS_SHA256_DIGEST_SIZE) {
errno = ENOBUFS;
return -1;
}
SHA256_Init(&sha256); SHA256_Init(&sha256);
} }