core: return 0 in case of invalid parameters received in function secure_derive_key

v2.8-utf8proc
Sébastien Helleu 2020-02-29 11:19:15 +01:00
parent e2135fc3eb
commit 45fd04ee72
1 changed files with 3 additions and 0 deletions

View File

@ -179,6 +179,9 @@ secure_derive_key (const char *salt, const char *passphrase,
int length, length_hash;
gcry_md_hd_t hd_md;
if (!salt || !passphrase || !key || (length_key < 1))
return 0;
memset (key, 0, length_key);
length = SECURE_SALT_SIZE + strlen (passphrase);