2d07d30c44
Credit to OSS-Fuzz for finding this. CVE-2017-3736 (Imported from upstream's 668a709a8d7ea374ee72ad2d43ac72ec60a80eee and 420b88cec8c6f7c67fad07bf508dcccab094f134.) This bug does not affect BoringSSL as we do not enable the ADX code. Note the test vector had to be tweaked to take things in and out of Montgomery form. (There may be something to be said for test vectors for just BN_mod_mul_montgomery, though we'd need separate 64-bit and 32-bit ones because R can be different.) Change-Id: I832070731ac1c5f893f9c1746892fc4a32f023f5 Reviewed-on: https://boringssl-review.googlesource.com/22484 Commit-Queue: Adam Langley <agl@google.com> Reviewed-by: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> |
||
---|---|---|
.. | ||
armv4-mont.pl | ||
armv8-mont.pl | ||
bn-586.pl | ||
co-586.pl | ||
rsaz-avx2.pl | ||
x86_64-gcc.c | ||
x86_64-mont5.pl | ||
x86_64-mont.pl | ||
x86-mont.pl |