From: Bodo Möller <bodo@openssl.org>
Date: Wed, 20 Feb 2002 11:59:42 +0000 (+0000)
Subject: bugfix: allocate sufficiently large buffer
X-Git-Tag: OpenSSL_0_9_6d~20^2~154
X-Git-Url: https://git.openssl.org/?p=openssl.git;a=commitdiff_plain;h=d009bcbfb6f768b366a7cdd471186511282467a4;ds=sidebyside

bugfix: allocate sufficiently large buffer

Submitted by: Nils Larsch
---

diff --git a/crypto/ec/ec_mult.c b/crypto/ec/ec_mult.c
index f14f8d88ed..4e409d07bf 100644
--- a/crypto/ec/ec_mult.c
+++ b/crypto/ec/ec_mult.c
@@ -233,7 +233,7 @@ int EC_POINTs_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *scalar,
 
 	wsize = OPENSSL_malloc(totalnum * sizeof wsize[0]);
 	wNAF_len = OPENSSL_malloc(totalnum * sizeof wNAF_len[0]);
-	wNAF = OPENSSL_malloc(totalnum * sizeof wNAF[0] + 1);
+	wNAF = OPENSSL_malloc((totalnum + 1) * sizeof wNAF[0]);
 	if (wNAF != NULL)
 		{
 		wNAF[0] = NULL; /* preliminary pivot */