Rust wrapper: test invalid kdr_index parameters

Author: holtrop-wolfssl

wrapper/rust/wolfssl-wolfcrypt/tests/test_kdf.rs

@@ -7,6 +7,8 @@ use wolfssl_wolfcrypt::hmac::HMAC;
 use wolfssl_wolfcrypt::kdf::*;
 #[cfg(all(hmac, kdf_tls13))]
 use wolfssl_wolfcrypt::sha::SHA256;
+#[cfg(kdf_srtp)]
+use wolfssl_wolfcrypt::sys;
 
 #[test]
 #[cfg(all(hmac, kdf_pbkdf2))]
@@ -251,6 +253,66 @@ fn test_srtcp_kdf() {
     assert_eq!(key_s, expected_ks);
 }
 
+#[test]
+#[cfg(kdf_srtp)]
+fn test_srtp_kdf_invalid_kdr_index() {
+    common::setup();
+
+    let key = [
+        0xc4u8, 0x80, 0x9f, 0x6d, 0x36, 0x98, 0x88, 0x72,
+        0x8e, 0x26, 0xad, 0xb5, 0x32, 0x12, 0x98, 0x90
+    ];
+    let salt = [
+        0x0eu8, 0x23, 0x00, 0x6c, 0x6c, 0x04, 0x4f, 0x56,
+        0x62, 0x40, 0x0e, 0x9d, 0x1b, 0xd6
+    ];
+    let index = [
+        0x48u8, 0x71, 0x65, 0x64, 0x9c, 0xca
+    ];
+    let max_valid = (index.len() * 8) as i32;
+    let mut key_e = [0u8; 16];
+    let mut key_a = [0u8; 20];
+    let mut key_s = [0u8; 14];
+
+    let rc = srtp_kdf(&key, &salt, -2, &index, &mut key_e, &mut key_a, &mut key_s)
+        .expect_err("srtp_kdf() should fail for kdr_index = -2");
+    assert_eq!(rc, sys::wolfCrypt_ErrorCodes_BAD_FUNC_ARG);
+
+    let rc = srtp_kdf(&key, &salt, max_valid + 1, &index, &mut key_e, &mut key_a, &mut key_s)
+        .expect_err("srtp_kdf() should fail for too-large kdr_index");
+    assert_eq!(rc, sys::wolfCrypt_ErrorCodes_BAD_FUNC_ARG);
+}
+
+#[test]
+#[cfg(kdf_srtp)]
+fn test_srtcp_kdf_invalid_kdr_index() {
+    common::setup();
+
+    let key = [
+        0xc4u8, 0x80, 0x9f, 0x6d, 0x36, 0x98, 0x88, 0x72,
+        0x8e, 0x26, 0xad, 0xb5, 0x32, 0x12, 0x98, 0x90
+    ];
+    let salt = [
+        0x0eu8, 0x23, 0x00, 0x6c, 0x6c, 0x04, 0x4f, 0x56,
+        0x62, 0x40, 0x0e, 0x9d, 0x1b, 0xd6
+    ];
+    let index = [
+        0x56u8, 0xf3, 0xf1, 0x97
+    ];
+    let max_valid = (index.len() * 8) as i32;
+    let mut key_e = [0u8; 16];
+    let mut key_a = [0u8; 20];
+    let mut key_s = [0u8; 14];
+
+    let rc = srtcp_kdf(&key, &salt, -2, &index, &mut key_e, &mut key_a, &mut key_s)
+        .expect_err("srtcp_kdf() should fail for kdr_index = -2");
+    assert_eq!(rc, sys::wolfCrypt_ErrorCodes_BAD_FUNC_ARG);
+
+    let rc = srtcp_kdf(&key, &salt, max_valid + 1, &index, &mut key_e, &mut key_a, &mut key_s)
+        .expect_err("srtcp_kdf() should fail for too-large kdr_index");
+    assert_eq!(rc, sys::wolfCrypt_ErrorCodes_BAD_FUNC_ARG);
+}
+
 #[test]
 #[cfg(kdf_srtp)]
 fn test_srtp_kdr_to_idx() {