bug 964: Add check for key size to the Xenroll code

Signed-off-by: Michael Tänzer <neo@nhng.de>

diff --git a/www/keygenIE.js b/www/keygenIE.js
index 51da0ef..7b5aed2 100644 (file)
--- a/www/keygenIE.js
+++ b/www/keygenIE.js
@@ -452,7 +452,15 @@
                /// Get the selected key size
                var getKeySize = function () {
                        var bits = parseInt(keySize.value, 10);
-                       //TODO: check if the bits are sane
+                       if ( bits < getMinSigKeyLength() || bits > getMaxSigKeyLength() ||
+                                       (getStepSigKeyLength() &&
+                                               (bits - getMinSigKeyLength()) %
+                                                       getStepSigKeyLength() !== 0)
+                               )
+                       {
+                               return false;
+                       }
+                       
                        return bits;
                }