Gilles Peskine ff6a32d79c Fix low-probability arithmetic error in ECC
Fix the subtraction in fix_negative, which was incorrectly not looking
for a carry. This caused the result to be wrong when the least
significant limb of N was 0. Fix #4296.

The bug was introduced by d10e8fae9e30cac60297b1e1834002db183429e5
"Optimize fix_negative". Thanks to Philippe Antoine (catenacyber) for
reporting the bug which was found by his EC differential fuzzer.
Credit to OSS-Fuzz.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2021-04-04 01:10:41 +02:00
..
2021-03-04 14:34:50 +00:00
2021-01-29 11:09:50 +01:00
2021-04-04 01:10:41 +02:00
2020-11-16 15:02:16 +01:00
2021-02-23 20:29:38 +01:00
2021-03-29 14:20:18 +01:00
2021-03-29 14:20:18 +01:00
2021-03-29 14:20:18 +01:00
2021-03-29 14:20:18 +01:00
2020-09-22 11:57:16 +02:00
2020-11-25 13:10:50 +01:00
2020-11-25 13:10:50 +01:00
2021-02-22 19:24:03 +01:00
2021-03-10 18:17:12 +00:00
2021-03-05 14:24:03 +00:00
2020-09-01 11:04:53 +02:00