Add runtime checking for DECLASSIFY flag

sipa · sipa · commit 74b026f05d52 · 2023-01-11T16:07:37.000-05:00
diff --git a/src/secp256k1.c b/src/secp256k1.c
@@ -99,6 +99,12 @@ size_t secp256k1_context_preallocated_size(unsigned int flags) {
             return 0;
     }
 
+    if (EXPECT(!SECP256K1_CHECKMEM_RUNNING() && (flags & SECP256K1_FLAGS_BIT_CONTEXT_DECLASSIFY), 0)) {
+            secp256k1_callback_call(&default_illegal_callback,
+                                    "Declassify flag requires running with memory checking");
+            return 0;
+    }
+
     return ret;
 }
 

Original file line number	Diff line number	Diff line change
`@@ -99,6 +99,12 @@ size_t secp256k1_context_preallocated_size(unsigned int flags) {`
`99`	`99`	`return 0;`
`100`	`100`	`}`
`101`	`101`
	`102`	`+ if (EXPECT(!SECP256K1_CHECKMEM_RUNNING() && (flags & SECP256K1_FLAGS_BIT_CONTEXT_DECLASSIFY), 0)) {`
	`103`	`+ secp256k1_callback_call(&default_illegal_callback,`
	`104`	`+ "Declassify flag requires running with memory checking");`
	`105`	`+ return 0;`
	`106`	`+ }`
	`107`	`+`
`102`	`108`	`return ret;`
`103`	`109`	`}`
`104`	`110`