authorgravatar for 124872+jedisct1@users.noreply.github.comFrank Denis <124872+jedisct1@users.noreply.github.com> 2024-12-14 20:26:55+01:00
committergravatar for noreply@github.comGitHub <noreply@github.com> 2024-12-14 19:26:55+00:00
log0fac47cf28dfc669397a2bb1f661b13915a0ab4c
tree9a40f9332d878be860652d1d3d9bc82e36a2e070
parent70de2f3a763550cf408705a73cc66f79a45a6e68
signaturebadge-check Signed by PGP key B5690EEEBB952194

argon2: bail out if m < 8p (#22232)

Fixes #22231

1 files changed, 1 insertions(+), 0 deletions(-)

lib/std/crypto/argon2.zig+1
...@@ -496,6 +496,7 @@ pub fn kdf(...@@ -496,6 +496,7 @@ pub fn kdf(
496 if (password.len > max_int) return KdfError.WeakParameters;496 if (password.len > max_int) return KdfError.WeakParameters;
497 if (salt.len < 8 or salt.len > max_int) return KdfError.WeakParameters;497 if (salt.len < 8 or salt.len > max_int) return KdfError.WeakParameters;
498 if (params.t < 1 or params.p < 1) return KdfError.WeakParameters;498 if (params.t < 1 or params.p < 1) return KdfError.WeakParameters;
499 if (params.m / 8 < params.p) return KdfError.WeakParameters;
499500
500 var h0 = initHash(password, salt, params, derived_key.len, mode);501 var h0 = initHash(password, salt, params, derived_key.len, mode);
501 const memory = @max(502 const memory = @max(