deps: float 99540ec from openssl (CVE-2018-0735) · nodejs/node@d8fb81f (original) (raw)
File tree
1 file changed
lines changed
- deps/openssl/openssl/crypto/ec
1 file changed
lines changed
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -177,8 +177,8 @@ static int ec_mul_consttime(const EC_GROUP *group, EC_POINT *r, | ||
| 177 | 177 | */ |
| 178 | 178 | cardinality_bits = BN_num_bits(cardinality); |
| 179 | 179 | group_top = bn_get_top(cardinality); |
| 180 | -if ((bn_wexpand(k, group_top + 1) == NULL) | |
| 181 | -| | |
| 180 | +if ((bn_wexpand(k, group_top + 2) == NULL) | |
| 181 | +| | |
| 182 | 182 | goto err; |
| 183 | 183 | |
| 184 | 184 | if (!BN_copy(k, scalar)) |
| @@ -205,7 +205,7 @@ static int ec_mul_consttime(const EC_GROUP *group, EC_POINT *r, | ||
| 205 | 205 | * k := scalar + 2*cardinality |
| 206 | 206 | */ |
| 207 | 207 | kbit = BN_is_bit_set(lambda, cardinality_bits); |
| 208 | -BN_consttime_swap(kbit, k, lambda, group_top + 1); | |
| 208 | +BN_consttime_swap(kbit, k, lambda, group_top + 2); | |
| 209 | 209 | |
| 210 | 210 | group_top = bn_get_top(group->field); |
| 211 | 211 | if ((bn_wexpand(s->X, group_top) == NULL) |