check buflen is less than BLAKE2B_BLOCKBYTES * 2

rlm2002 · rlm2002 · commit 6de2557748a5 · 2025-07-09T10:00:28.000-06:00
diff --git a/wolfcrypt/src/blake2b.c b/wolfcrypt/src/blake2b.c
@@ -356,6 +356,8 @@ int blake2b_final( blake2b_state *S, byte *out, byte outlen )
     }
 
     S->buflen -= BLAKE2B_BLOCKBYTES;
+    if ( S->buflen >= (BLAKE2B_BLOCKBYTES * 2) )
+      return BAD_LENGTH_E;
     XMEMCPY( S->buf, S->buf + BLAKE2B_BLOCKBYTES, (wolfssl_word)S->buflen );
   }
 

Original file line number	Diff line number	Diff line change
`@@ -356,6 +356,8 @@ int blake2b_final( blake2b_state S, byte out, byte outlen )`
`356`	`356`	`}`
`357`	`357`
`358`	`358`	`S->buflen -= BLAKE2B_BLOCKBYTES;`
	`359`	`+ if ( S->buflen >= (BLAKE2B_BLOCKBYTES * 2) )`
	`360`	`+ return BAD_LENGTH_E;`
`359`	`361`	`XMEMCPY( S->buf, S->buf + BLAKE2B_BLOCKBYTES, (wolfssl_word)S->buflen );`
`360`	`362`	`}`
`361`	`363`