* grub-core/disk/AFSplitter.c (AF_merge): Check that mdlen is not 0.

diff --git a/ChangeLog b/ChangeLog
index 3ae00de22171a690f7881b997e2a27e40b3e50cc..0c85b35b4958c631ff59807da0658b103bd92009 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+2015-01-20  Vladimir Serbinenko  <phcoder@gmail.com>
+
+       * grub-core/disk/AFSplitter.c (AF_merge): Check that mdlen is not 0.
+
 2015-01-20  Vladimir Serbinenko  <phcoder@gmail.com>
 
        * grub-core/commands/i386/pc/play.c (grub_cmd_play): Avoid

diff --git a/grub-core/disk/AFSplitter.c b/grub-core/disk/AFSplitter.c
index d76a1c44747db673b14772281efe2889350131c4..7e1bd574835e75b0ee9752f414531ab6ff4b198f 100644 (file)
--- a/grub-core/disk/AFSplitter.c
+++ b/grub-core/disk/AFSplitter.c
@@ -76,7 +76,7 @@ AF_merge (const gcry_md_spec_t * hash, grub_uint8_t * src, grub_uint8_t * dst,
   if (bufblock == NULL)
     return GPG_ERR_OUT_OF_MEMORY;
 
-  if (hash->mdlen > GRUB_CRYPTO_MAX_MDLEN)
+  if (hash->mdlen > GRUB_CRYPTO_MAX_MDLEN || hash->mdlen == 0)
     return GPG_ERR_INV_ARG;
 
   grub_memset (bufblock, 0, blocksize);