boringssl/crypto/bn
Brian Smith 3f1904bee1 Set |bn->neg| to zero in |bn_set_words|.
If the values of any of the coordinates in the output point |r| were
negative during nistz256 multiplication, then the calls to
|bn_set_word| would result in the wrong coordinates being returned
(the negatives of the correct coordinates would be returned instead).
Fix that.

Change-Id: I6048e62f76dca18f625650d11ef5a051c9e672a4
Reviewed-on: https://boringssl-review.googlesource.com/7442
Reviewed-by: David Benjamin <davidben@google.com>
2016-03-11 19:21:11 +00:00
..
asm bn/asm/x86_64-mont5.pl: unify gather procedure in hardly used path and reorganize/harmonize post-conditions. 2016-03-01 18:04:20 +00:00
add.c
bn_asn1.c Rename the BIGNUM ASN.1 functions. 2016-01-27 22:37:44 +00:00
bn_test.cc Update some comments in bn_test.c in light of acb24518. 2016-02-02 18:22:19 +00:00
bn.c Set |bn->neg| to zero in |bn_set_words|. 2016-03-11 19:21:11 +00:00
CMakeLists.txt
cmp.c
convert.c Don't cast |OPENSSL_malloc|/|OPENSSL_realloc| result. 2016-02-11 22:07:56 +00:00
ctx.c
div.c Move |bn_div_words| to crypto/bn/div.c and make it static. 2016-02-25 16:16:14 +00:00
exponentiation.c crypto/bn/x86_64-mont5.pl: constant-time gather procedure. 2016-03-01 18:04:15 +00:00
gcd.c
generic.c Move |bn_div_words| to crypto/bn/div.c and make it static. 2016-02-25 16:16:14 +00:00
internal.h Avoid potential uninitialized memory read in crypto/ec/p256-x86_64.c. 2016-03-09 19:04:36 +00:00
kronecker.c
montgomery.c Fix trivial -Wcast-qual violations. 2016-01-21 21:06:02 +00:00
mul.c Minimize the scope of the |BN_*_SIZE_*| constants. 2016-02-08 18:28:31 +00:00
prime.c
random.c
rsaz_exp.c Use |alignas| for alignment. 2016-01-25 23:05:04 +00:00
rsaz_exp.h
shift.c
sqrt.c