Add a test for CVE-2023-3446
authorMatt Caswell <matt@openssl.org>
Fri, 7 Jul 2023 13:39:48 +0000 (14:39 +0100)
committerTomas Mraz <tomas@openssl.org>
Wed, 19 Jul 2023 09:21:18 +0000 (11:21 +0200)
commit4791e79b8803924b28c19af4d4036ad85335110d
tree1e657e35095e021caf5f866ac8294a08d760ccfc
parentfc9867c1e03c22ebf56943be205202e576aabf23
Add a test for CVE-2023-3446

Confirm that the only errors DH_check() finds with DH parameters with an
excessively long modulus is that the modulus is too large. We should not
be performing time consuming checks using that modulus.

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21451)

(cherry picked from commit ede782b4c8868d1f09c9cd237f82b6f35b7dba8b)
test/dhtest.c