Skip to content

sanity checks on truncation of input lengths #11945

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
JacobBarthelmeh wants to merge 5 commits into
base: master
Choose a base branch
from
+221 −7
Open

sanity checks on truncation of input lengths #11945

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
048fcf1
sanity checks on truncation of input lengths
JacobBarthelmeh Oct 30, 2026
70febf6
update test case to call final for freeing resources
JacobBarthelmeh Oct 30, 2026
67b1de9
Free existing internal state if present with CMAC_Init() call
JacobBarthelmeh Nov 3, 2026
8a456ef
reset test case file pointer after close
JacobBarthelmeh Nov 4, 2026
52a5036
add more debugging messages on parameter sanity checks
JacobBarthelmeh Nov 6, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
154 changes: 149 additions & 5 deletions src/ssl_crypto.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,11 @@
#endif
#else

/* Check a size_t/unsigned long length can be passed to wolfCrypt as a word32
* without being truncated. */
#define WOLFSSL_CRYPTO_LEN_FITS_WORD32(len) \
((size_t)(word32)(len) == (size_t)(len))

/*******************************************************************************
* START OF Digest APIs
******************************************************************************/
Expand Down Expand Up @@ -59,6 +64,11 @@ void wolfSSL_MD4_Update(WOLFSSL_MD4_CTX* md4, const void* data,
{
WOLFSSL_ENTER("MD4_Update");

/* wolfCrypt takes a word32 length - fail rather than truncate. */
if (!WOLFSSL_CRYPTO_LEN_FITS_WORD32(len)) {
WOLFSSL_MSG("MD4_Update: length too large");
return;
}
/* Update wolfCrypt MD4 object with data. */
wc_Md4Update((wc_Md4*)md4, (const byte*)data, (word32)len);
}
Expand Down Expand Up @@ -112,6 +122,11 @@ int wolfSSL_MD5_Update(WOLFSSL_MD5_CTX* md5, const void* input,
{
WOLFSSL_ENTER("MD5_Update");

/* wolfCrypt takes a word32 length, fail rather than truncate. */
if (!WOLFSSL_CRYPTO_LEN_FITS_WORD32(sz)) {
WOLFSSL_MSG("MD5 Update size is to long, would have been truncated.");
return 0;
}
/* Update wolfCrypt MD5 object with data. */
return wc_Md5Update((wc_Md5*)md5, (const byte*)input, (word32)sz) == 0;
}
Expand Down Expand Up @@ -185,8 +200,13 @@ unsigned char* wolfSSL_MD5(const unsigned char* data, size_t len,
if (hash == NULL) {
hash = dgst;
}
/* wolfCrypt takes a word32 length - fail rather than truncate. */
if (!WOLFSSL_CRYPTO_LEN_FITS_WORD32(len)) {
WOLFSSL_MSG("wolfSSL_MD5: length too large");
hash = NULL;
}
/* One shot MD5 hash with wolfCrypt. */
if (wc_Md5Hash(data, (word32)len, hash) != 0) {
else if (wc_Md5Hash(data, (word32)len, hash) != 0) {
WOLFSSL_MSG("wc_Md5Hash error");
hash = NULL;
}
Expand Down Expand Up @@ -226,6 +246,11 @@ int wolfSSL_SHA_Update(WOLFSSL_SHA_CTX* sha, const void* input,
{
WOLFSSL_ENTER("SHA_Update");

/* wolfCrypt takes a word32 length, fail rather than truncate. */
if (!WOLFSSL_CRYPTO_LEN_FITS_WORD32(sz)) {
WOLFSSL_MSG("SHA Update size is to long, would have been truncated.");
return 0;

@SparkiDev SparkiDev Nov 5, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Add WOLFSSL_MSG calls to all of these.

}
/* Update wolfCrypt SHA object with data. */
return wc_ShaUpdate((wc_Sha*)sha, (const byte*)input, (word32)sz) == 0;
}
Expand Down Expand Up @@ -375,6 +400,11 @@ int wolfSSL_SHA224_Update(WOLFSSL_SHA224_CTX* sha224, const void* input,
{
WOLFSSL_ENTER("SHA224_Update");

/* wolfCrypt takes a word32 length, fail rather than truncate. */
if (!WOLFSSL_CRYPTO_LEN_FITS_WORD32(sz)) {
WOLFSSL_MSG("SHA224 Update size is to long.");
return 0;
}
/* Update wolfCrypt SHA-224 object with data. */
return wc_Sha224Update((wc_Sha224*)sha224, (const byte*)input, (word32)sz)
== 0;
Expand Down Expand Up @@ -434,6 +464,11 @@ int wolfSSL_SHA256_Update(WOLFSSL_SHA256_CTX* sha256, const void* input,
{
WOLFSSL_ENTER("SHA256_Update");

/* wolfCrypt takes a word32 length, fail rather than truncate. */
if (!WOLFSSL_CRYPTO_LEN_FITS_WORD32(sz)) {
WOLFSSL_MSG("SHA256 Update size is to long.");
return 0;
}
/* Update wolfCrypt SHA-256 object with data. */
return wc_Sha256Update((wc_Sha256*)sha256, (const byte*)input, (word32)sz)
== 0;
Expand Down Expand Up @@ -523,6 +558,11 @@ int wolfSSL_SHA384_Update(WOLFSSL_SHA384_CTX* sha384, const void* input,
{
WOLFSSL_ENTER("SHA384_Update");

/* wolfCrypt takes a word32 length, fail rather than truncate. */
if (!WOLFSSL_CRYPTO_LEN_FITS_WORD32(sz)) {
WOLFSSL_MSG("SHA384 Update size is to long.");
return 0;
}
/* Update wolfCrypt SHA-384 object with data. */
return wc_Sha384Update((wc_Sha384*)sha384, (const byte*)input, (word32)sz)
== 0;
Expand Down Expand Up @@ -582,6 +622,11 @@ int wolfSSL_SHA512_Update(WOLFSSL_SHA512_CTX* sha512, const void* input,
{
WOLFSSL_ENTER("SHA512_Update");

/* wolfCrypt takes a word32 length, fail rather than truncate. */
if (!WOLFSSL_CRYPTO_LEN_FITS_WORD32(sz)) {
WOLFSSL_MSG("SHA512 Update size is to long.");
return 0;
}
/* Update wolfCrypt SHA-512 object with data. */
return wc_Sha512Update((wc_Sha512*)sha512, (const byte*)input, (word32)sz)
== 0;
Expand Down Expand Up @@ -660,6 +705,11 @@ int wolfSSL_SHA512_224_Update(WOLFSSL_SHA512_224_CTX* sha512, const void* input,
{
WOLFSSL_ENTER("SHA512_224_Update");

/* wolfCrypt takes a word32 length, fail rather than truncate. */
if (!WOLFSSL_CRYPTO_LEN_FITS_WORD32(sz)) {
WOLFSSL_MSG("SHA512-224 Update size is to long.");
return 0;
}
/* Update wolfCrypt SHA-512-224 object with data. */
return wc_Sha512_224Update((wc_Sha512*)sha512, (const byte*)input,
(word32)sz) == 0;
Expand Down Expand Up @@ -739,6 +789,11 @@ int wolfSSL_SHA512_256_Update(WOLFSSL_SHA512_256_CTX* sha512, const void* input,
{
WOLFSSL_ENTER("SHA512_256_Update");

/* wolfCrypt takes a word32 length, fail rather than truncate. */
if (!WOLFSSL_CRYPTO_LEN_FITS_WORD32(sz)) {
WOLFSSL_MSG("SHA512-256 Update size is to long.");
return 0;
}
/* Update wolfCrypt SHA-512-256 object with data. */
return wc_Sha512_256Update((wc_Sha512*)sha512, (const byte*)input,
(word32)sz) == 0;
Expand Down Expand Up @@ -821,6 +876,11 @@ int wolfSSL_SHA3_224_Update(WOLFSSL_SHA3_224_CTX* sha3, const void* input,
{
WOLFSSL_ENTER("SHA3_224_Update");

/* wolfCrypt takes a word32 length, fail rather than truncate. */
if (!WOLFSSL_CRYPTO_LEN_FITS_WORD32(sz)) {
WOLFSSL_MSG("SHA3-224 Update size is to long.");
return 0;
}
/* Update wolfCrypt SHA3-224 object with data. */
return wc_Sha3_224_Update((wc_Sha3*)sha3, (const byte*)input, (word32)sz)
== 0;
Expand Down Expand Up @@ -880,6 +940,11 @@ int wolfSSL_SHA3_256_Update(WOLFSSL_SHA3_256_CTX* sha3, const void* input,
{
WOLFSSL_ENTER("SHA3_256_Update");

/* wolfCrypt takes a word32 length, fail rather than truncate. */
if (!WOLFSSL_CRYPTO_LEN_FITS_WORD32(sz)) {
WOLFSSL_MSG("SHA3-256 Update size is to long.");
return 0;
}
/* Update wolfCrypt SHA3-256 object with data. */
return wc_Sha3_256_Update((wc_Sha3*)sha3, (const byte*)input, (word32)sz)
== 0;
Expand Down Expand Up @@ -939,6 +1004,11 @@ int wolfSSL_SHA3_384_Update(WOLFSSL_SHA3_384_CTX* sha3, const void* input,
{
WOLFSSL_ENTER("SHA3_384_Update");

/* wolfCrypt takes a word32 length, fail rather than truncate. */
if (!WOLFSSL_CRYPTO_LEN_FITS_WORD32(sz)) {
WOLFSSL_MSG("SHA3-384 Update size is to long.");
return 0;
}
/* Update wolfCrypt SHA3-384 object with data. */
return wc_Sha3_384_Update((wc_Sha3*)sha3, (const byte*)input, (word32)sz)
== 0;
Expand Down Expand Up @@ -998,6 +1068,11 @@ int wolfSSL_SHA3_512_Update(WOLFSSL_SHA3_512_CTX* sha3, const void* input,
{
WOLFSSL_ENTER("SHA3_512_Update");

/* wolfCrypt takes a word32 length, fail rather than truncate. */
if (!WOLFSSL_CRYPTO_LEN_FITS_WORD32(sz)) {
WOLFSSL_MSG("SHA3-512 Update size is to long.");
return 0;
}
/* Update wolfCrypt SHA3-512 object with data. */
return wc_Sha3_512_Update((wc_Sha3*)sha3, (const byte*)input, (word32)sz)
== 0;
Expand Down Expand Up @@ -1056,6 +1131,12 @@ unsigned char* wolfSSL_SHA1(const unsigned char* data, size_t len,

WOLFSSL_ENTER("wolfSSL_SHA1");

/* wolfCrypt takes a word32 length - fail rather than truncate. */
if (!WOLFSSL_CRYPTO_LEN_FITS_WORD32(len)) {
WOLFSSL_MSG("wolfSSL_SHA1: length too large");
return NULL;
}

/* Use static buffer if none passed in. */
if (hash == NULL) {
WOLFSSL_MSG("STATIC BUFFER BEING USED. wolfSSL_SHA1 IS NOT "
Expand Down Expand Up @@ -1123,6 +1204,12 @@ unsigned char* wolfSSL_SHA224(const unsigned char* data, size_t len,

WOLFSSL_ENTER("wolfSSL_SHA224");

/* wolfCrypt takes a word32 length - fail rather than truncate. */
if (!WOLFSSL_CRYPTO_LEN_FITS_WORD32(len)) {
WOLFSSL_MSG("wolfSSL_SHA224: length too large");
return NULL;
}

/* Use static buffer if none passed in. */
if (hash == NULL) {
WOLFSSL_MSG("STATIC BUFFER BEING USED. wolfSSL_SHA224 IS NOT "
Expand Down Expand Up @@ -1190,6 +1277,12 @@ unsigned char* wolfSSL_SHA256(const unsigned char* data, size_t len,

WOLFSSL_ENTER("wolfSSL_SHA256");

/* wolfCrypt takes a word32 length - fail rather than truncate. */
if (!WOLFSSL_CRYPTO_LEN_FITS_WORD32(len)) {
WOLFSSL_MSG("wolfSSL_SHA256: length too large");
return NULL;
}

/* Use static buffer if none passed in. */
if (hash == NULL) {
WOLFSSL_MSG("STATIC BUFFER BEING USED. wolfSSL_SHA256 IS NOT "
Expand Down Expand Up @@ -1257,6 +1350,12 @@ unsigned char* wolfSSL_SHA384(const unsigned char* data, size_t len,

WOLFSSL_ENTER("wolfSSL_SHA384");

/* wolfCrypt takes a word32 length - fail rather than truncate. */
if (!WOLFSSL_CRYPTO_LEN_FITS_WORD32(len)) {
WOLFSSL_MSG("wolfSSL_SHA384: length too large");
return NULL;
}

/* Use static buffer if none passed in. */
if (hash == NULL) {
WOLFSSL_MSG("STATIC BUFFER BEING USED. wolfSSL_SHA384 IS NOT "
Expand Down Expand Up @@ -1324,6 +1423,12 @@ unsigned char* wolfSSL_SHA512(const unsigned char* data, size_t len,

WOLFSSL_ENTER("wolfSSL_SHA512");

/* wolfCrypt takes a word32 length - fail rather than truncate. */
if (!WOLFSSL_CRYPTO_LEN_FITS_WORD32(len)) {
WOLFSSL_MSG("wolfSSL_SHA512: length too large");
return NULL;
}

/* Use static buffer if none passed in. */
if (hash == NULL) {
WOLFSSL_MSG("STATIC BUFFER BEING USED. wolfSSL_SHA512 IS NOT "
Expand Down Expand Up @@ -2044,6 +2149,12 @@ unsigned char* wolfSSL_HMAC(const WOLFSSL_EVP_MD* evp_md, const void* key,
if ((evp_md == NULL) || (key == NULL) || (md == NULL)) {
rc = BAD_FUNC_ARG;
}
/* wc_HmacUpdate takes a word32 length, reject data that would be
* truncated. */
if ((rc == 0) && !WOLFSSL_CRYPTO_LEN_FITS_WORD32(len)) {
WOLFSSL_MSG("HMAC size is to long.");
rc = BAD_FUNC_ARG;
}

if (rc == 0) {
/* Get the hash type corresponding to the EVP digest. */
Expand Down Expand Up @@ -2237,13 +2348,20 @@ int wolfSSL_CMAC_Init(WOLFSSL_CMAC_CTX* ctx, const void *key, size_t keySz,
ret = 0;
}
/* Key length must match cipher. */
if ((ret == 1) && ((int)keySz != wolfSSL_EVP_Cipher_key_length(cipher))) {
if ((ret == 1) && (!WOLFSSL_CRYPTO_LEN_FITS_WORD32(keySz) ||
((int)keySz != wolfSSL_EVP_Cipher_key_length(cipher)))) {
WOLFSSL_MSG("wolfSSL_CMAC_Init: "
"supplied key size doesn't match requested cipher");
ret = 0;
}

if ((ret == 1) && (ctx->internal == NULL)) {
if ((ret == 1) && (ctx->internal != NULL)) {
/* Free internal if re-initializing without a CMAC_Final() */
#if (!defined(HAVE_FIPS) || FIPS_VERSION_GE(5, 3)) && !defined(HAVE_SELFTEST)
wc_CmacFree((Cmac*)ctx->internal);
#endif
}
else if (ret == 1) {
/* Allocate memory for wolfSSL CMAC object. */
ctx->internal = (Cmac*)XMALLOC(sizeof(Cmac), NULL, DYNAMIC_TYPE_CMAC);
if (ctx->internal == NULL)
Expand Down Expand Up @@ -2285,8 +2403,9 @@ int wolfSSL_CMAC_Update(WOLFSSL_CMAC_CTX* ctx, const void* data, size_t len)

WOLFSSL_ENTER("wolfSSL_CMAC_Update");

/* Validate parameters. */
if (ctx == NULL) {
/* wolfCrypt takes a word32 length, fail rather than truncate. */
if ((ctx == NULL) || !WOLFSSL_CRYPTO_LEN_FITS_WORD32(len)) {
WOLFSSL_MSG("CMAC size is to long.");
ret = 0;
}

Expand Down Expand Up @@ -2695,6 +2814,13 @@ void wolfSSL_DES_cbc_encrypt(const unsigned char* input, unsigned char* output,

WOLFSSL_ENTER("wolfSSL_DES_cbc_encrypt");

/* Negative length breaks the block calculations below and wolfCrypt takes
* a word32 length - fail rather than truncate. */
if ((length < 0) || !WOLFSSL_CRYPTO_LEN_FITS_WORD32(length)) {
WOLFSSL_MSG("wolfSSL_DES_cbc_encrypt: bad length");
return;
}

#ifdef WOLFSSL_SMALL_STACK
des = (Des*)XMALLOC(sizeof(Des), NULL, DYNAMIC_TYPE_CIPHER);
if (des == NULL) {
Expand Down Expand Up @@ -2835,6 +2961,12 @@ void wolfSSL_DES_ede3_cbc_encrypt(const unsigned char* input,
}
#endif

/* wolfCrypt takes a word32 length - fail rather than truncate. */
if ((sz > 0) && !WOLFSSL_CRYPTO_LEN_FITS_WORD32(sz)) {
WOLFSSL_MSG("wolfSSL_DES_ede3_cbc_encrypt: length too large");
sz = 0;
}

if (sz > 0) {
int ret;
byte key[DES3_KEY_SIZE];
Expand Down Expand Up @@ -3216,6 +3348,10 @@ void wolfSSL_AES_cbc_encrypt(const unsigned char *in, unsigned char* out,
(len == 0)) {
WOLFSSL_MSG("Error, Null argument passed in");
}
/* wolfCrypt takes a word32 length - fail rather than truncate. */
else if (!WOLFSSL_CRYPTO_LEN_FITS_WORD32(len)) {
WOLFSSL_MSG("Error, length too large");
}
/* Set IV for operation. */
else {
int ret;
Expand Down Expand Up @@ -3282,6 +3418,10 @@ void wolfSSL_AES_cfb128_encrypt(const unsigned char *in, unsigned char* out,
if ((key == NULL) || (in == NULL) || (out == NULL) || (iv == NULL)) {
WOLFSSL_MSG("Error, Null argument passed in");
}
/* wolfCrypt takes a word32 length - fail rather than truncate. */
else if (!WOLFSSL_CRYPTO_LEN_FITS_WORD32(len)) {
WOLFSSL_MSG("Error, length too large");
}
else {
int ret;
Aes* aes = (Aes*)key;
Expand Down Expand Up @@ -3565,6 +3705,10 @@ void wolfSSL_RC4(WOLFSSL_RC4_KEY* key, size_t len, const unsigned char* in,
if ((key == NULL) || (in == NULL) || (out == NULL)) {
WOLFSSL_MSG("Bad argument passed in");
}
/* wolfCrypt takes a word32 length - fail rather than truncate. */
else if (!WOLFSSL_CRYPTO_LEN_FITS_WORD32(len)) {
WOLFSSL_MSG("Length too large");
}
else {
/* Encrypt/decrypt data. */
wc_Arc4Process((Arc4*)key, out, in, (word32)len);
Expand Down
Loading
Loading