Return failure if sigLen == 0

rlm2002 · rlm2002 · commit 7da1916aca38 · 2026-04-13T16:30:30.000-06:00
diff --git a/wolfcrypt/src/evp.c b/wolfcrypt/src/evp.c
@@ -4992,7 +4992,7 @@ int wolfSSL_EVP_DigestVerifyFinal(WOLFSSL_EVP_MD_CTX *ctx,
 
         hashLen = wolfssl_mac_len(ctx->hash.hmac.macType);
 
-        if (siglen > hashLen || siglen > INT_MAX)
+        if (siglen == 0 || siglen > hashLen || siglen > INT_MAX)
             return WOLFSSL_FAILURE;
         /* May be a truncated signature. */
     }

Original file line number	Diff line number	Diff line change
`@@ -4992,7 +4992,7 @@ int wolfSSL_EVP_DigestVerifyFinal(WOLFSSL_EVP_MD_CTX *ctx,`
`4992`	`4992`
`4993`	`4993`	`hashLen = wolfssl_mac_len(ctx->hash.hmac.macType);`
`4994`	`4994`
`4995`		`- if (siglen > hashLen \|\| siglen > INT_MAX)`
	`4995`	`+ if (siglen == 0 \|\| siglen > hashLen \|\| siglen > INT_MAX)`
`4996`	`4996`	`return WOLFSSL_FAILURE;`
`4997`	`4997`	`/* May be a truncated signature. */`
`4998`	`4998`	`}`