From 47851a8b110b85e0991877ac6d548826a77732d3 Mon Sep 17 00:00:00 2001 From: npt-1707 Date: Mon, 25 May 2026 03:20:38 +0800 Subject: [PATCH] CaptfEncoder-V1/src/app/thirdparty/node-forge/lib/jsbn.js: fix CVE-2023-25653 --- CaptfEncoder-V1/src/app/thirdparty/node-forge/lib/jsbn.js | 1 + 1 file changed, 1 insertion(+) diff --git a/CaptfEncoder-V1/src/app/thirdparty/node-forge/lib/jsbn.js b/CaptfEncoder-V1/src/app/thirdparty/node-forge/lib/jsbn.js index 11f965c..8adefdb 100644 --- a/CaptfEncoder-V1/src/app/thirdparty/node-forge/lib/jsbn.js +++ b/CaptfEncoder-V1/src/app/thirdparty/node-forge/lib/jsbn.js @@ -987,6 +987,7 @@ function barrettRevert(x) { return x; } //x = x mod m (HAC 14.42) function barrettReduce(x) { +if (x.s < 0) { throw Error("Barrett reduction on negative input"); } x.drShiftTo(this.m.t-1,this.r2); if(x.t > this.m.t+1) { x.t = this.m.t+1; x.clamp(); } this.mu.multiplyUpperTo(this.r2,this.m.t+1,this.q3);