Security-58286.20.16.tar.gz

[apple/security.git] / OSX / libsecurity_cryptkit / lib / feeECDSA.c

diff --git a/OSX/libsecurity_cryptkit/lib/feeECDSA.c b/OSX/libsecurity_cryptkit/lib/feeECDSA.c
index cbed7a4e989cf5ab5d182ed9c6ca01d07dddd230..57736073d3602f0f6231505f288810e032ed2df3 100644 (file)
--- a/OSX/libsecurity_cryptkit/lib/feeECDSA.c
+++ b/OSX/libsecurity_cryptkit/lib/feeECDSA.c
@@ -460,7 +460,10 @@ feeReturn feeECDSAVerify(const unsigned char *sigData,
      * Verify that c and d are within [1,group_order-1]
      */
     if((gcompg(cp->cOrderPlus, c) != 1) || (gcompg(cp->cOrderPlus, d) != 1) ||
      * Verify that c and d are within [1,group_order-1]
      */
     if((gcompg(cp->cOrderPlus, c) != 1) || (gcompg(cp->cOrderPlus, d) != 1) ||

-       isZero(c) || isZero(d)) {
+       isZero(c) || isZero(d))
+    {
+        returnGiant(c);
+        returnGiant(d);

         return FR_InvalidSignature;
     }
 
         return FR_InvalidSignature;
     }