From c5344af9fc5c6c70570d208563f874be1202826c Mon Sep 17 00:00:00 2001 From: "Sergio R. Caprile" Date: Fri, 13 Nov 2026 11:04:01 -0300 Subject: [PATCH] make padding stricter --- mongoose.c | 4 ++-- src/tls_builtin.c | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/mongoose.c b/mongoose.c index 79213c67..a9af8ee5 100644 --- a/mongoose.c +++ b/mongoose.c @@ -19593,11 +19593,11 @@ static bool mg_tls_send_cert_verify(struct mg_connection *c, bool is_client) { verify[10] = 0x02; // ASN.1 INTEGER verify[11] = (uint8_t) (32 + adj1); memmove(verify + (size_t) (12 + (adj1 > 0)), sig + (size_t) (adj1 < 0), - (size_t) (32 + (adj1 < 0))); + (size_t) (32 - (adj1 < 0))); verify[12 + 32 + adj1] = 0x02; // ASN.1 INTEGER verify[13 + 32 + adj1] = (uint8_t) (32 + adj2); memmove(verify + (size_t) (14 + 32 + adj1 + (adj2 > 0)), - sig + (size_t) (32 + (adj2 < 0)), (size_t) (32 + (adj2 < 0))); + sig + (size_t) (32 + (adj2 < 0)), (size_t) (32 - (adj2 < 0))); sigsz = (size_t) (70 + adj1 + adj2); verifysz = 8U + sigsz; verify[3] = (uint8_t) (sigsz + 4); diff --git a/src/tls_builtin.c b/src/tls_builtin.c index c57a5e61..2d2003a5 100644 --- a/src/tls_builtin.c +++ b/src/tls_builtin.c @@ -1188,11 +1188,11 @@ static bool mg_tls_send_cert_verify(struct mg_connection *c, bool is_client) { verify[10] = 0x02; // ASN.1 INTEGER verify[11] = (uint8_t) (32 + adj1); memmove(verify + (size_t) (12 + (adj1 > 0)), sig + (size_t) (adj1 < 0), - (size_t) (32 + (adj1 < 0))); + (size_t) (32 - (adj1 < 0))); verify[12 + 32 + adj1] = 0x02; // ASN.1 INTEGER verify[13 + 32 + adj1] = (uint8_t) (32 + adj2); memmove(verify + (size_t) (14 + 32 + adj1 + (adj2 > 0)), - sig + (size_t) (32 + (adj2 < 0)), (size_t) (32 + (adj2 < 0))); + sig + (size_t) (32 + (adj2 < 0)), (size_t) (32 - (adj2 < 0))); sigsz = (size_t) (70 + adj1 + adj2); verifysz = 8U + sigsz; verify[3] = (uint8_t) (sigsz + 4);