OpenHarmony-6.0-Release

zxz--3rsa_kem: validate RSA_public_encrypt() result in RSASVE

c963222a创建于 4月16日历史提交

文件	最后提交记录	最后更新时间
common	openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	2 年前
fips	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
implementations	rsa_kem: validate RSA_public_encrypt() result in RSASVE RSA_public_encrypt() returns the number of bytes written on success and -1 on failure. With the existing if (ret) check, a provider-side RSA KEM encapsulation can incorrectly succeed when the underlying RSA public encrypt operation fails. In that case the code reports success, returns lengths as if encapsulation completed normally, and leaves the freshly generated secret available instead of discarding it. Tighten the success condition so RSASVE only succeeds when RSA_public_encrypt() returns a positive value equal to the modulus-sized output expected for RSA_NO_PADDING. Any other return value is treated as failure, and the generated secret is cleansed before returning. Fixes CVE-2026-31790 Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.foundation> MergeDate: Mon Apr 6 19:51:30 2026 (cherry picked from commit 001e01db3e996e13ffc72386fe79d03a6683b5ac) Signed-off-by: zxz*3 <zhangxiaozan1@huawei.com>	4 个月前
baseprov.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
build.info	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
decoders.inc	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
defltprov.c	[Backport] providers: Add SM4 GCM implementation Reference: https://github.com/openssl/openssl/commit/c2ee608a234340aa735f894f8d84ead0ce58286e The GCM mode of the SM4 algorithm is specifieded by RFC8998. Signed-off-by: Tianjia Zhang <tianjia.zhang@linux.alibaba.com> Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/16491) Signed-off-by: lanming <lanming@huawei.com>	2 年前
encoders.inc	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
fips-sources.checksums	openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	2 年前
fips.checksum	openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	2 年前
fips.module.sources	openssl: add loongarch64 support Signed-off-by: Wu Xiaotian <wuxiaotian@loongson.cn>	1 年前
legacyprov.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
nullprov.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
prov_running.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
stores.inc	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前