elliptic - npm Package Compare versions

Comparing version 6.5.6 to 6.5.7

lib/elliptic/ec/signature.js

@@ -41,2 +41,6 @@ 'use strict';
 
+  if(buf[p.place] === 0x00) {
+    return false;
+  }
+
   var val = 0;
@@ -90,2 +94,5 @@ for (var i = 0, off = p.place; i < octetLen; i++, off++) {
   }
+  if ((data[p.place] & 128) !== 0) {
+    return false;
+  }
   var r = data.slice(p.place, rlen + p.place);
@@ -103,2 +110,5 @@ p.place += rlen;
   }
+  if ((data[p.place] & 128) !== 0) {
+    return false;
+  }
   var s = data.slice(p.place, slen + p.place);
@@ -105,0 +115,0 @@ if (r[0] === 0) {

lib/elliptic/eddsa/signature.js

@@ -24,2 +24,3 @@ 'use strict';
   if (Array.isArray(sig)) {
+    assert(sig.length === eddsa.encodingLength * 2, 'Signature has invalid size');
     sig = {
@@ -26,0 +27,0 @@ R: sig.slice(0, eddsa.encodingLength),

package.json

 {
   "name": "elliptic",
-  "version": "6.5.6",
+  "version": "6.5.7",
   "description": "EC cryptography",
@@ -5,0 +5,0 @@ "main": "lib/elliptic.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

118848

increased by0.21%

Lines of code

3424

increased by0.29%

No dependency changes