lib: parameter check in hash_calculate
authorHeinrich Schuchardt <heinrich.schuchardt@canonical.com>
Tue, 22 Aug 2023 09:10:20 +0000 (11:10 +0200)
committerHeinrich Schuchardt <heinrich.schuchardt@canonical.com>
Sun, 27 Aug 2023 06:21:07 +0000 (08:21 +0200)
If hash_calculate is invoked with region_count = 0, it will try to hash
INT_MAX regions. We should check this parameter.

* Avoid a comparison with different signedness.
* Check that region_count is at least 1.
* Avoid a superfluous assignment.

Fixes: b37b46f042cc ("rsa: Use checksum algorithms from struct hash_algo")
Signed-off-by: Heinrich Schuchardt <heinrich.schuchardt@canonical.com>
Reviewed-by: Simon Glass <sjg@chromium.org>
lib/hash-checksum.c

index 8f2a42f..68c290d 100644 (file)
@@ -23,8 +23,10 @@ int hash_calculate(const char *name,
        struct hash_algo *algo;
        int ret = 0;
        void *ctx;
-       uint32_t i;
-       i = 0;
+       int i;
+
+       if (region_count < 1)
+               return -EINVAL;
 
        ret = hash_progressive_lookup_algo(name, &algo);
        if (ret)