Add runtime checking for DECLASSIFY flag

sipa · sipa · commit 336f09716919 · 2022-12-20T12:25:48.000-05:00
diff --git a/src/secp256k1.c b/src/secp256k1.c
@@ -89,6 +89,12 @@ size_t secp256k1_context_preallocated_size(unsigned int flags) {
             return 0;
     }
 
+    if (EXPECT(!SECP256K1_CHECKMEM_RUNNING() && (flags & SECP256K1_FLAGS_BIT_CONTEXT_DECLASSIFY), 0)) {
+            secp256k1_callback_call(&default_illegal_callback,
+                                    "Declassify flag requires running with memory checking");
+            return 0;
+    }
+
     return ret;
 }
 

Original file line number	Diff line number	Diff line change
`@@ -89,6 +89,12 @@ size_t secp256k1_context_preallocated_size(unsigned int flags) {`
`89`	`89`	`return 0;`
`90`	`90`	`}`
`91`	`91`
	`92`	`+ if (EXPECT(!SECP256K1_CHECKMEM_RUNNING() && (flags & SECP256K1_FLAGS_BIT_CONTEXT_DECLASSIFY), 0)) {`
	`93`	`+ secp256k1_callback_call(&default_illegal_callback,`
	`94`	`+ "Declassify flag requires running with memory checking");`
	`95`	`+ return 0;`
	`96`	`+ }`
	`97`	`+`
`92`	`98`	`return ret;`
`93`	`99`	`}`
`94`	`100`