avoid panic in eddsa verify

franziskuskiefer · Jul 9, 2021 · 0601cf0 · 0601cf0
1 parent 86c0124
commit 0601cf0
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/evercrypt-rs/src/signature.rs b/evercrypt-rs/src/signature.rs
@@ -101,6 +101,12 @@ pub fn verify(
 ) -> Result<bool, Error> {
     match mode {
         Mode::Ed25519 => {
+            if signature.len() != 64 {
+                return Err(Error::InvalidSignature);
+            }
+            if pk.len() != 32 {
+                return Err(Error::InvalidPoint);
+            }
             let mut key = [0u8; 32];
             key.clone_from_slice(pk);
             let mut sig = [0u8; 64];