X-Git-Url: https://git.distorted.org.uk/u/mdw/putty/blobdiff_plain/fedd99b61158fecec2a7d016401d1cf1b9b19b22..143ec28a626f97d0c81b7d653a3de3eee419268d:/sshrsa.c

diff --git a/sshrsa.c b/sshrsa.c
index 6db265ee..2dc09d1c 100644
--- a/sshrsa.c
+++ b/sshrsa.c
@@ -863,8 +863,9 @@ static void oaep_mask(const struct ssh_hash *h, void *seed, int seedlen,
     while (datalen > 0) {
         int i, max = (datalen > h->hlen ? h->hlen : datalen);
         void *s;
-        unsigned char counter[4], hash[h->hlen];
+        unsigned char counter[4], hash[SSH2_KEX_MAX_HASH_LEN];
 
+	assert(h->hlen <= SSH2_KEX_MAX_HASH_LEN);
         PUT_32BIT(counter, count);
         s = h->init();
         h->bytes(s, seed, seedlen);