Add an assertion so that short-rsa2-key-crash at least avoids segfaulting

while we come up with a better solution.

[originally from svn r5146]

diff --git a/sshrsa.c b/sshrsa.c
index baec83e02d517e046557895d8c7623d76df6ce08..4f95fb38aa3c9897e2bcc0f69f740ea31bad0510 100644 (file)
--- a/sshrsa.c
+++ b/sshrsa.c
@@ -802,6 +802,7 @@ static unsigned char *rsa2_sign(void *key, char *data, int datalen,
     SHA_Simple(data, datalen, hash);
 
     nbytes = (bignum_bitcount(rsa->modulus) - 1) / 8;
+    assert(1 <= nbytes - 20 - ASN1_LEN);
     bytes = snewn(nbytes, unsigned char);
 
     bytes[0] = 1;